last executing test programs: 26.650320966s ago: executing program 2 (id=380): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)={0x24, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000020000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kvm_msi_set_irq\x00', r5, 0x0, 0x7}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0xd, 0x12, r3, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x2000) mmap(&(0x7f00004e8000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003600018dea8fd2000000e0ff0c000000280bfd22a7d5b6ae5363a456a54e038dfd8dc77812cbb183b7c8a0d3f1e399de0955d7ca9e9a9c488c71748a82bd04b7203897130879f8b9344115b87017770279dbe44972b78d8987581a999684ecdb"], 0x14}, 0x1, 0x0, 0x0, 0x20004881}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r7) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x002', @ANYRES16=r8, @ANYBLOB="010000000000000000000f0000000c000780080001009cc00000"], 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100214}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x208, r8, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x369f}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x10000, @loopback, 0x200}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x868}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005ff000/0x2000)=nil, 0x2000, 0x3, 0x13, r3, 0x4000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r9, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r9, 0x1000) 26.519695168s ago: executing program 2 (id=383): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000203000000000000000000000d00000000000000000000000a020000000000000000000003000000000300000003"], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200"], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="780000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004800128009000100766c616e00000000380002800600010000000000280003800c0001e400000000000000000c00010000000000020000000c00070000000000010000000400048008000500", @ANYRES32=r5], 0x78}, 0x1, 0xba01}, 0x0) 26.34394614s ago: executing program 2 (id=387): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000140)=0x8002000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f00000002c0)="6885390c21abc218e778a10f0624c8b82a8ea0cd9db0c1f38a41ba2008ddd3ccb82cae3bfc2e14da56e2665eda6f4d6fb710d487c6af08d238a34714f91656545fc209066fd67249b5ad37863f2715", 0x4f}, {&(0x7f0000000000)="106c31e473351aea4fa87a81725b20eb57da1f210d39a37c4770f6da86c0", 0x1e}], 0x3) 24.802030124s ago: executing program 2 (id=390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000040)="9846e9bfdb060033", 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x7, 0x7, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x40, 0x0, 0x5}}) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@bridge_delneigh={0x30, 0x1d, 0x0, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x8, 0x4, 0xa}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x2004c040) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) 15.738970811s ago: executing program 2 (id=390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000040)="9846e9bfdb060033", 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x7, 0x7, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x40, 0x0, 0x5}}) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@bridge_delneigh={0x30, 0x1d, 0x0, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x8, 0x4, 0xa}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x2004c040) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) 9.001572592s ago: executing program 1 (id=582): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1) (async, rerun: 32) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x110, r1, 0x766f5000) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x30080, 0x0) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x3, 0x8000, 0x7ff, 0x2a, 0x6}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={r2, 0xd0, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x56000, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x7d3, @local, 0x80}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0xfffffff9, @private0, 0x5}, @in6={0xa, 0x4e24, 0x3, @local, 0xf}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}]}, &(0x7f0000000280)=0x10) (async) setsockopt$inet6_int(r1, 0x29, 0x34, &(0x7f00000002c0)=0x1ff, 0x4) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r3, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xd8, 0x21}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xb6f}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004801}, 0x8010) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000880)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000540)={0x2c4, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24c, 0x11d, 0x0, 0x1, [{0x220, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x20c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x3, 0x7, 0x6, 0x1ff, 0x22cb, 0x800]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x18a, 0x3, 0x800, 0x8, 0xd4, 0xfff, 0x8000, 0x71]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x16, 0x7, 0x2, 0x7fff, 0x3, 0x8001, 0x6, 0x7]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x4, 0x4}, {0x6, 0x4}, {0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x7, 0x8}, {0x6, 0x2}, {0x3, 0x5}, {0x3, 0x2}, {0x0, 0x7}, {0x4, 0x2}, {0x5, 0x6}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xc, 0x0, 0x1, 0xff6b, 0x10, 0x2, 0xff]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x0, 0x47, 0x8, 0x344, 0x2, 0xa, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0x30, 0x6, 0x5, 0x4, 0x2d, 0x1f, 0x5, 0x5, 0x9, 0x19, 0x30, 0x1b, 0x12, 0x12, 0x5, 0x5, 0x1, 0xc, 0x2, 0x6, 0x16, 0x36, 0x31, 0x12, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8a, 0x7f, 0x8, 0x5, 0x3, 0x381, 0x0, 0xb]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0xb, 0x3, 0x1, 0x5, 0x0, 0x24, 0x6c, 0x10]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0xf4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x6}, {0x1, 0x2}, {0x5, 0x2}, {0x1, 0x2}, {0x3, 0x8}, {0x1, 0x8}, {0x3}, {0x6, 0x3}, {0x5, 0x8}]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x4, 0x2}, {0x0, 0x6}, {0x7, 0x5}, {0x1}, {0x3, 0x3}, {0x6, 0x9}, {0x7, 0x4}, {0x1, 0x3}, {0x0, 0x2}, {0x3, 0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x3, 0x5}, {0x4, 0x3}, {0x0, 0x8}, {0x6, 0x6}, {0x0, 0x6}, {0x5, 0x2}, {0x1, 0xa}, {0x2, 0x2}, {0x3, 0x1}, {0x5, 0x8}, {0x4, 0x6}, {0x3, 0x4}, {0x7, 0x9}, {0x1, 0x6}, {0x4, 0x3}, {0x1}, {0x7, 0x3}, {0x5, 0x9}, {0x6, 0x8}, {0x0, 0x4}, {0x5, 0x5}, {0x7, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x5, 0x1}, {0x0, 0x6}, {0x5, 0x6}, {0x4, 0x4}, {0x5, 0x7}, {0x0, 0x6}, {0x5, 0x3}, {0x5, 0x6}, {0x0, 0x5}, {0x2, 0x2}, {0x0, 0x4}, {0x4, 0xa}, {0x5}, {0x3, 0xa}, {0x7, 0x1}, {0x1, 0xa}, {0x3}, {0x2, 0x7}, {0x5, 0x7}, {0x7, 0x1}, {0x3, 0x2}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x3}, {0x1, 0x1}, {0x7, 0x2}, {0x6, 0x6}, {0x0, 0x9}, {0x4, 0x2}, {0x0, 0x7}, {0x3}, {}, {0x1, 0x2}, {0x0, 0x8}, {0x6, 0x3}, {0x2, 0xa}, {0x7, 0x7}, {0x3, 0x9}, {0x2, 0x1}, {0x6, 0x7}, {0x7, 0x6}, {0x2, 0x2}, {0x2, 0x8}, {0x1, 0x7}, {0x1, 0x2}, {0x2, 0x9}, {0x1, 0xa}, {0x5, 0x1}, {0x2, 0x3}, {0x1, 0x9}, {0x2, 0x2}, {0x4, 0x2}, {0x7, 0x8}, {0x6, 0x7}, {0x6, 0x3}, {0x3, 0x8}, {0x3}, {0x4, 0x6}, {0x1, 0x1}, {0x0, 0x7}, {0x7, 0xa}, {0x3, 0x7}, {0x1, 0x1}, {0x7, 0x8}, {0x2, 0x5}, {0x4}, {0x0, 0x4}, {0x6, 0x7}, {0x1, 0x5}, {0x7, 0x6}, {0x5, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x2, 0x3}, {0x7, 0x2}, {0x7, 0x6}, {0x7, 0xa}, {0x4, 0x7}, {0x3, 0x9}, {0x3, 0x1}, {0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x6, 0x1}, {0x4, 0x1}, {0x4, 0x2}, {0x3, 0x5}, {0x5, 0x8}, {0x5, 0x5}, {0x4, 0x1}, {0x3, 0x8}, {0x6, 0x7}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x16, 0x1, 0x4, 0x1b, 0x18, 0xc, 0xc, 0xc]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x7, 0x3ff, 0x6, 0x2, 0xd3, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0xb, 0x8a, 0x1, 0x5, 0x3, 0x9, 0x180]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xee}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8f}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x719}]}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r5) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0xb08040}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xac, r7, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000880}, 0x8) (async) r8 = accept$unix(r0, &(0x7f0000000a80), &(0x7f0000000b00)=0x6e) ioctl$sock_SIOCADDDLCI(r8, 0x8980, &(0x7f0000000b40)={'\x00', 0x5}) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000b80)={'veth0_to_batadv\x00', 0x9, 0x1}) r9 = socket(0x1e, 0x800, 0x1ff) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000c80)={'syzkaller1\x00', 0xf}) (async, rerun: 64) r10 = socket$netlink(0x10, 0x3, 0x8) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r3, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r9) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x44, r11, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240000c1}, 0x80) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r12, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x40, r13, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r10) r14 = accept4$netrom(r0, &(0x7f00000010c0)={{0x3, @rose}, [@default, @netrom, @netrom, @default, @netrom, @bcast, @rose, @null]}, &(0x7f0000001140)=0x48, 0x80800) setsockopt$netrom_NETROM_N2(r14, 0x103, 0x3, &(0x7f0000001180)=0x3, 0x4) 8.81988115s ago: executing program 1 (id=585): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0xffff, @loopback}, 0x10) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) sendmsg(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) ioctl(r0, 0x2fc, &(0x7f0000000140)) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) sendmmsg$inet6(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) (async) close(r1) 8.669770784s ago: executing program 1 (id=588): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='ifs_status\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113a000000000085100000020000b7000000000000009400c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@netrom, @default, @rose, @remote, @rose, @null, @netrom, @default]}, &(0x7f0000000140)=0x48, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4060000000000007111b600000000008510000002000000850000000000000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8ffd, 0x3a, 0x0, 0x3a, 0x0, 0x0, 0x10000000}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x10) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x52ea56ba10d84aab]}}, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r7 = socket(0x1d, 0x2, 0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x1, 0x9, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xffff0001}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000030601010000000000000000000000080900020073797a3200000000050001000700000047fdf70b1a082088c7decb6e2bd3a5c6f389f9ade2e4a5fa0faf87500692cc08a62de10e8554a7956ba27a59d7e05ebc7c8e63e085dd2c53"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x6a, 0x1, 0x0, 0xc) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) 8.450816832s ago: executing program 1 (id=591): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x10}]}, 0x18}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x4, &(0x7f0000000280)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000440)={0x0, 0xd}, &(0x7f0000000480)=0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2, 0x0, @void, @value}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f00000005c0)={0x7, 0x8}, 0xc) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x10, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0200000002"], 0x10) setsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f0000000200), 0x4) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x47}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r9, @ANYRES32=r1, @ANYBLOB="0200"], 0x10) 8.282706931s ago: executing program 1 (id=594): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0xc, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xf6}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)={0x2fc, r4, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x128, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7252}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20da9471}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe18f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3592}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77720f7e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77bf6750}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x268c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff2f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b4c6412}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7acf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fcf6e67}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7aa95190}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1381}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd336}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f0b358f}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x115a0b96}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb8d3715}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4201f1fa}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d942547}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf231}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15993892}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fc0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30e220d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x54b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a9d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ff50e34}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b6f4312}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12cfb026}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5523}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xcd0df2b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2fd8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cb19dc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d45d768}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a9b783}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6639b680}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x543761d7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34afa8bf}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b6bb6d1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31ec0a1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d5d5b66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1750876c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1184df09}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2502f050}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ac60cf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70088f0d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65916d6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x743d82f2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c28db8c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5867707b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18f167cb}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x108c99f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x98a82ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4455243}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8eb6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xce55420}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3568}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d5b4bd5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd440}]}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x5010}, 0x20048044) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r2}, 0x10) 7.794687177s ago: executing program 1 (id=601): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0xfffc, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9"}, 0x3c) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x80, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x34, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x3}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7c}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x64}}, 0x455eaa6adcac4e3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000002c0)) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000002c0)) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x91082000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x1f4, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x417d3f49}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x750900b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x415ed8c8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71bb9436}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1041ca4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1db3b794}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa6514f8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa213a54}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ef2a55c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xffffff81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x848b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2065}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4aad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4874}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4655}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5250}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xab73467}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e0e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa66f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x44, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf327f09}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bfee668}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x90, 0x8, 0x0, 0x1, [{0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41031b9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7dff9017}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b79983d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x570121d1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b352fb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78a9e408}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1877bfa8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51faee9a}]}]}]}, 0x1f4}}, 0x80) 6.015031343s ago: executing program 2 (id=390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000040)="9846e9bfdb060033", 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x7, 0x7, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x40, 0x0, 0x5}}) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@bridge_delneigh={0x30, 0x1d, 0x0, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x8, 0x4, 0xa}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x2004c040) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) 2.03081813s ago: executing program 0 (id=649): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendto$inet6(r3, &(0x7f0000000600)="a6396ba6dee9cda060a6dba436a0cc9eb282c217c77c46fc40169b9c", 0x1c, 0x0, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000240), 0x0, 0xc4, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000005c0)={&(0x7f0000000240), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r4, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x44001) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6feba1b6745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd8d80ef294fde6549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a08567ef515898f0f7dfd3fc198092af3265c5df377a66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4a58b59f9a252723480b08ae9bd52c176380a42b972a3400b5d28b273e60000007cac9d35a991c27e23ce5217fec9ce89ea2dea8ddb383e53cdd077e7c2d73404b7450664f70225897307d8a140ba97bfc2232dccdb1dd0496c219315c02f2ef46f30add1aa13e52d67116328c3a5ee3356eadea07abe8506767771d68e760f8c623fb64865a942acc4912dcd1fa5d729cb45c15577bbb8b08a705efeaf09dd6aadeb8d61501e4fd9c9b1ac845a2138cbde58a04589888c0e528a5134e1dfa8b3f6d8a76517df589cae1019a3bc280e99fb661271357dbbd7e9c42d3fe45efaaa00"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000006c0)=@nat={'nat\x00', 0x19, 0x2, 0x2ac, [0x20000f40, 0x0, 0x0, 0x20000f70, 0x2000103e], 0x0, &(0x7f0000000600), &(0x7f0000000f40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x0, 0x6e, 0x8035, 'veth0_vlan\x00', 'veth1_to_bridge\x00', 'ip_vti0\x00', 'wlan1\x00', @multicast, [0x0, 0xff, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x5, 0x8, 0x19, 'pim6reg\x00', 'vlan0\x00', 'veth1_vlan\x00', 'veth0_to_bridge\x00', @random="16ee5bb4e40b", [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @random="01abf0d72f68", [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x11e, 0x11e, 0x14e, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x1}, {0x2}], 0x1, 0x1}}}, @physdev={{'physdev\x00', 0x0, 0x48}, {{'macvlan0\x00', {}, 'veth0_macvtap\x00', {0xff}, 0xc, 0xba0b5e33ed8d6ee1}}}], [], @common=@STANDARD={'\x00', 0x8, {0xa795ed8370defb5f}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x324) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)='\x00\x00\x00\x00\x00', 0x5}], 0x1}, 0x0) 1.909598689s ago: executing program 0 (id=651): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@isdn, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/97, 0x61}], 0x1, &(0x7f0000000180)=""/14, 0xe}, 0x12021) connect$netrom(r0, &(0x7f0000000000)={{0x6, @default}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000000), 0x4) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000080)=0x5, 0x4) close(r0) 1.771055463s ago: executing program 3 (id=652): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000680)="bc", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/34, 0x22}], 0x1, &(0x7f0000000d40)=""/59, 0x3b, 0x18}}], 0x1, 0x2000, 0x0) 1.769842738s ago: executing program 0 (id=653): r0 = socket(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000008000000080000008500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000094a71347d700"], 0x48) (async) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000002040), &(0x7f0000000100)=@tcp6=r2}, 0x20) (async) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x0, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x89}}, @printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$MRT(r0, 0x0, 0xcf, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x8}, {0xffff, 0xffff}}}, 0x24}}, 0x4000) 1.720158275s ago: executing program 3 (id=654): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000180), 0x12) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fdffffff000000000000000061123001000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000140)="f4339bc23d", 0x5}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = accept4(r3, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x20) sendfile(r4, 0xffffffffffffffff, 0x0, 0x6) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a00001000000ebff200012800800010067747000140002800800030055000000080001"], 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x180000) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x11, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000020627000041866284856d39000d00000000000000000000000500040000000c00078008001240000000000500050002000000050001000600000013000300"/80], 0x58}}, 0x0) r8 = accept$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a80)=0x14) getsockopt$packet_int(r8, 0x107, 0x9, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x350, 0x350, 0x350, 0x0, 0x350, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @ECN={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x78}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r9, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18180100"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007200000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.608233789s ago: executing program 3 (id=655): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001780)=@deltclass={0x24, 0x29, 0x331, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x6}, {0x6, 0xb}, {0x10, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}], 0x1, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={r5, 0x4}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000100)="7e8c4dd82698d56a8295209e6963c15074227a7e289fd39f48540c8661d54a18cc46517ac9007e96b17b03", 0x2b}, {&(0x7f0000000180)="683584e36b2b8565db40de11717cae556edccd6eabf590729284598c12fae6e2d43dc475e0ee533deb7859f2ba94adc9ff9101feba9b0d4c8a82480486240345d5064a462066184dcda3952b95b88f627ab3732f99375b0c00c19a7b9f5dead120e95ca0e7eeca3e4748b95e3c8c462ff18eb7bc9042e858ddfbab2382cc4e3b067f80aa28853e3686bbf0c742f9d992bf3e596e0ebf5aa4b2d30b2b3900f340266b7e8e51a58a2fc7ff7a57adf8c5630507b9434321fc8578439928018ddf5c8906fc6e4597dca604", 0xc9}], 0x2, &(0x7f0000000340)=[@ip_ttl={{0x14, 0x0, 0x2, 0xf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010102, @loopback}}}], 0x38}, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) 1.32990409s ago: executing program 4 (id=657): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0xd, 0x12, r0, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x2000) mmap(&(0x7f00004e8000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f00005ff000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x4000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x800000000000000, 0x13, r1, 0x1000) 1.250169731s ago: executing program 4 (id=658): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r1, 0x0, 0xfffffffffffffcee, 0x40c10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0xe, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404a814}, 0x20000010) 1.119079445s ago: executing program 4 (id=659): socket$inet6(0xa, 0x200000000003, 0x87) (async) syz_emit_ethernet(0x4e, &(0x7f0000000d00)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000200086dd6003136c001887000000000100000000000000000000ff0000000000006000000000000000018702030000"], 0x0) 1.105563162s ago: executing program 4 (id=660): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000c18255a8000000000000000000000000e500"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='cdg\x00', 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000200)={0x2, 0x0, '\x00', [@pad1]}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f87d7a5", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r5}, 0x8) (rerun: 64) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r5, @ANYBLOB="0886b339ab545505d52497744938cf8f6fc011098a9092ccefa3c4d1", @ANYRESHEX=r3, @ANYRES32=r1, @ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) 862.027978ms ago: executing program 0 (id=661): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="011a195f6a4ab90622e782e6ffa5a17c0325bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) r3 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) accept4$bt_l2cap(r3, &(0x7f0000000100), &(0x7f0000000240)=0xe, 0x80000) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x1, 0x9}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x4a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000090a010400000000000000000700000708000640000000000800084000000000080005400000000108000a4000000003b8010000000a0300000000000000000001000006c90006002bb6af7667beca727cfb40118a1cec70157e870c9148a57df4197955ad0248157e3857208dfcaf06e68fa9d8ea60beff7c31ecc028a698fa2917b36618889cb6a20e02d9e532561b442a8af78f5929407430b5e4f6d71e39a7951ec9252d3fc98223e2672b058ae7735ee359d86f8593d0b11f21fd05df792e1934c5f4ac9a12ea7adf6d533c3f0cc11466432cbe430bc832a274cae12ab104861b64ab72116b2e1e95c3871f25576ee3ad189d7bb1aed006b871afca202c16abce6412480f4eb9582e7f9a0000000c000440000000000000000545000600c39ca6a1ecae4ba97d03c80b3478bc3c85691a865fdce21eeff46caf8fd4c3b3431d5776fbb5fd8f1080f1b386bbd1ac7bf11b1c1ffe4c6c5ca263f85623eaf9970000000900010073797a310000000008000240000000030900010073797a310000000008000240000000024d000600723baafa773654a3c68ae39c346e430a1784cc98d7b37b0defec35d29b249cb9b17b21f4035ae29641f1cd9eb430057c7291315ec6008398a9051dce498e8dd3d66df3f8218538042a0000000c0004400000000000000002140000001000010000000000000000000100000ab95613bf0ae4cd513fe705c745c910399d8abecc9194168b584344501b0fe56e608996c2edacc8c6615d6b256003903e842ed0de60d0fe315f9c73d1a736de7ed709d80f083de6437694da85654aa8a58f8b0070fac48a176dc34da57c6787f8540d675bd93de6b99fb33c5091eb437d61dea3e62576d81d52044304ed0224a1fc454d5c9b6c5a0fcc495369e69da63de54bba39f023db8000dfa17a5f1699b1c823cc6a779495344e3b7566418db0e61ae0c06df95d9b03b5b93e7ae311fe569bbf145178c1a9e4ed15ffe7680dbcde4936"], 0x214}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r7, &(0x7f0000002840)=""/4089, 0xff9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_type(r8, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000000280), 0x9) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x0, 0x60}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88e7}]]}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @remote}, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0xb486, 0x9, 0x100, 0x8, 0x1000000}) sendfile(r8, r5, &(0x7f0000000140)=0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000007b0108000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, 0xf, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 391.740238ms ago: executing program 4 (id=662): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x20000002}}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @remote={0x5}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x60}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000002c0)={0x58, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x2, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r11, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r12}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r13, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000400)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r17 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r19 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r19, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r18, @ANYBLOB="000000000000000014001a"], 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000a40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000019c0)={0x520, r9, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r14}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x12}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r15}, {0x1a0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x51}}}]}}, {{0x8, 0x1, r16}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x62c9884c}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x133}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r20}, {0x130, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x9, 0xff, 0x6}, {0x5, 0x40, 0x9, 0x8001}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2e8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x520}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8000801) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x4004044) 389.384614ms ago: executing program 3 (id=663): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5b, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000a40), &(0x7f0000000a80)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000401000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000020100180000000000000000000000000000009500000000000000360a020000000001180100002020782500000201002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 312.296481ms ago: executing program 0 (id=664): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r3, 0x917, 0x0, 0x5dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000001240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000383a0020010000000000000000000000000001ff0200000000000000000000000000010101907802000000656f21ef37ba2bffff010000000000000000000000000001200100000000000000000000e4ffffff96c7e71a450b13fc"], 0x0) 214.99899ms ago: executing program 3 (id=665): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}]}]}, 0x40}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xe42cc8fd74824725) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) 213.223311ms ago: executing program 0 (id=666): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='f2fs_write_checkpoint\x00', r0}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x1a) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2}, {0x2, 0x3, 0x3, 0xa, 0x0, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {0x6, 0x0, 0xb, 0x9}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c"], 0x84}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) 143.017181ms ago: executing program 4 (id=667): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x66}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x4040010) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r4, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) close(r4) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x10, 0x0, 0x9, 0x40, 0x3, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000)=0x4a6a, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x90}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r7 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r5) recvmmsg(r3, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x1, 0x0) shutdown(r3, 0x1) pipe(&(0x7f0000000380)) r8 = socket$netlink(0x10, 0x3, 0x8000000004) unshare(0x400) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000200010000000900010073797a30000000002c00060000000101000000000000000001bae9000900010073797a30000000000900030073797a310000000068000000060a010400000000000000a7b900000008000b40000000004000048414c201800c000100636f756e7465720014000280280001800b0001006f626a726566f2001800028008000140f9a800000900020073797a3100f70000090001007379091000000000140000001100010000000000000000000000000a"], 0xdc}}, 0x0) 0s ago: executing program 3 (id=668): r0 = socket(0x2a, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000010000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x30, r5, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}]]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1a}}, 0x0, 0x0, 0x2b, 0x0, "33d6e85bdc17d6b477382e710ab71fcd9d74097af0d334975b5e479fd5ae7293e94214177667eb45650cbea03c3276aee385e92a41b8d8199f063e0f63df192dde5fd792fd69ba3dc353eeb390c4cdbd"}, 0xd8) (async) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r10, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r11 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r12}, 0x10) (async) connect$vsock_stream(r11, &(0x7f0000000000), 0x10) (async) connect$vsock_stream(r11, &(0x7f0000000040), 0x10) listen(r8, 0x0) (async) socket$kcm(0xa, 0x2, 0x73) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. [ 57.851694][ T5827] cgroup: Unknown subsys name 'net' [ 58.011239][ T5827] cgroup: Unknown subsys name 'cpuset' [ 58.019101][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.260330][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.371700][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.381954][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.390551][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.399973][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.408035][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.408789][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.416015][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.423304][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.437322][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.445301][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.454113][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.454844][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.463189][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.470620][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.476278][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.484465][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.494779][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.497063][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.503364][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.511099][ T5855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.524144][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.525845][ T5855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.538673][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.539311][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.546136][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.566288][ T5857] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.575118][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.597946][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.606515][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.613955][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.847918][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 61.920148][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 61.968204][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.975802][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.984287][ T5838] bridge_slave_0: entered allmulticast mode [ 61.991296][ T5838] bridge_slave_0: entered promiscuous mode [ 62.004947][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.012247][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.019560][ T5838] bridge_slave_1: entered allmulticast mode [ 62.026089][ T5838] bridge_slave_1: entered promiscuous mode [ 62.056018][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.067660][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.117426][ T5838] team0: Port device team_slave_0 added [ 62.159807][ T5838] team0: Port device team_slave_1 added [ 62.220436][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.227542][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.234956][ T5844] bridge_slave_0: entered allmulticast mode [ 62.241566][ T5844] bridge_slave_0: entered promiscuous mode [ 62.272930][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.287744][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.315173][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.336550][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.343886][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.351211][ T5844] bridge_slave_1: entered allmulticast mode [ 62.357979][ T5844] bridge_slave_1: entered promiscuous mode [ 62.376215][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.383382][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.409466][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.452986][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 62.470063][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 62.489362][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.503558][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.525830][ T5838] hsr_slave_0: entered promiscuous mode [ 62.532670][ T5838] hsr_slave_1: entered promiscuous mode [ 62.592875][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 62.613814][ T5844] team0: Port device team_slave_0 added [ 62.646062][ T5844] team0: Port device team_slave_1 added [ 62.704388][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.711901][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.719644][ T5852] bridge_slave_0: entered allmulticast mode [ 62.726205][ T5852] bridge_slave_0: entered promiscuous mode [ 62.736093][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.743371][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.751345][ T5837] bridge_slave_0: entered allmulticast mode [ 62.758152][ T5837] bridge_slave_0: entered promiscuous mode [ 62.781593][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.789023][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.796262][ T5852] bridge_slave_1: entered allmulticast mode [ 62.803231][ T5852] bridge_slave_1: entered promiscuous mode [ 62.823310][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.830638][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.838008][ T5837] bridge_slave_1: entered allmulticast mode [ 62.844643][ T5837] bridge_slave_1: entered promiscuous mode [ 62.864320][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.872037][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.898283][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.911058][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.918233][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.944741][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.991419][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.015641][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.041770][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.067075][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.102989][ T5837] team0: Port device team_slave_0 added [ 63.116859][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.124119][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.131769][ T5845] bridge_slave_0: entered allmulticast mode [ 63.138545][ T5845] bridge_slave_0: entered promiscuous mode [ 63.160245][ T5844] hsr_slave_0: entered promiscuous mode [ 63.167040][ T5844] hsr_slave_1: entered promiscuous mode [ 63.174593][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.182505][ T5844] Cannot create hsr debugfs directory [ 63.191218][ T5837] team0: Port device team_slave_1 added [ 63.203257][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.210688][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.217944][ T5845] bridge_slave_1: entered allmulticast mode [ 63.224487][ T5845] bridge_slave_1: entered promiscuous mode [ 63.264998][ T5852] team0: Port device team_slave_0 added [ 63.282419][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.295266][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.324534][ T5852] team0: Port device team_slave_1 added [ 63.356197][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.363534][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.390853][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.404021][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.411191][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.437270][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.480630][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.487626][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.514983][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.528267][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.535269][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.561553][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.572249][ T5857] Bluetooth: hci0: command tx timeout [ 63.572370][ T5847] Bluetooth: hci2: command tx timeout [ 63.592471][ T5845] team0: Port device team_slave_0 added [ 63.603969][ T5845] team0: Port device team_slave_1 added [ 63.618345][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.646244][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.658104][ T5847] Bluetooth: hci3: command tx timeout [ 63.658240][ T5857] Bluetooth: hci4: command tx timeout [ 63.663718][ T5847] Bluetooth: hci1: command tx timeout [ 63.700088][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.709725][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.721772][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.731848][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.758376][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.805811][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.814229][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.840884][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.858231][ T5837] hsr_slave_0: entered promiscuous mode [ 63.864504][ T5837] hsr_slave_1: entered promiscuous mode [ 63.871515][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.879147][ T5837] Cannot create hsr debugfs directory [ 63.887618][ T5852] hsr_slave_0: entered promiscuous mode [ 63.893942][ T5852] hsr_slave_1: entered promiscuous mode [ 63.903247][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.911043][ T5852] Cannot create hsr debugfs directory [ 64.006758][ T5845] hsr_slave_0: entered promiscuous mode [ 64.015928][ T5845] hsr_slave_1: entered promiscuous mode [ 64.022655][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.033785][ T5845] Cannot create hsr debugfs directory [ 64.086795][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.100334][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.148348][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.179307][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.318879][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.360828][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.384576][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.395741][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.439825][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.447274][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.458979][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.497521][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.521446][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.542316][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.566755][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.574135][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.591546][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.598707][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.627611][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.638438][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.652759][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.676311][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.726045][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.746133][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.760193][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.797642][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.870951][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.878097][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.909041][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.920444][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.927568][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.967518][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.035604][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.052987][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.065669][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.072884][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.109542][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.116652][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.135825][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.142996][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.175138][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.213130][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.220320][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.245885][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.279174][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.306010][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.313179][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.340456][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.347639][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.432535][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.469907][ T5838] veth0_vlan: entered promiscuous mode [ 65.552032][ T5838] veth1_vlan: entered promiscuous mode [ 65.575322][ T5844] veth0_vlan: entered promiscuous mode [ 65.593484][ T5844] veth1_vlan: entered promiscuous mode [ 65.648922][ T5849] Bluetooth: hci0: command tx timeout [ 65.654434][ T5847] Bluetooth: hci2: command tx timeout [ 65.673405][ T5838] veth0_macvtap: entered promiscuous mode [ 65.725059][ T5838] veth1_macvtap: entered promiscuous mode [ 65.731163][ T5849] Bluetooth: hci3: command tx timeout [ 65.738756][ T5849] Bluetooth: hci1: command tx timeout [ 65.744280][ T5847] Bluetooth: hci4: command tx timeout [ 65.772594][ T5844] veth0_macvtap: entered promiscuous mode [ 65.786440][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.805200][ T5844] veth1_macvtap: entered promiscuous mode [ 65.825413][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.863208][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.875897][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.887416][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.899751][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.924436][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.935710][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.952923][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.965053][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.984642][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.024617][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.034668][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.044195][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.064274][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.083910][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.093046][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.102119][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.111209][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.161257][ T5845] veth0_vlan: entered promiscuous mode [ 66.186896][ T5837] veth0_vlan: entered promiscuous mode [ 66.205985][ T5845] veth1_vlan: entered promiscuous mode [ 66.244962][ T5852] veth0_vlan: entered promiscuous mode [ 66.267442][ T5837] veth1_vlan: entered promiscuous mode [ 66.297358][ T5852] veth1_vlan: entered promiscuous mode [ 66.356905][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.372580][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.377529][ T5837] veth0_macvtap: entered promiscuous mode [ 66.392978][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.398689][ T5845] veth0_macvtap: entered promiscuous mode [ 66.407234][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.433858][ T5837] veth1_macvtap: entered promiscuous mode [ 66.455811][ T5845] veth1_macvtap: entered promiscuous mode [ 66.478394][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.486525][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.503626][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.509474][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.522272][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.533167][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.536252][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.543990][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.545424][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.572325][ T5852] veth0_macvtap: entered promiscuous mode [ 66.598736][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.610580][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.621076][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.631644][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.643820][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.654427][ T5852] veth1_macvtap: entered promiscuous mode [ 66.679817][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.688969][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.692966][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.697670][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.721171][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.747507][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.769411][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.780050][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.796908][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.810827][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.826590][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.836846][ T5924] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3'. [ 66.847614][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.883097][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.927987][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.955663][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 66.957217][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.981799][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.991975][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.002718][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.015311][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.039256][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.068220][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.101330][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.116040][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.126074][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.136659][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.146608][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.157129][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.169123][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.184548][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.194161][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.203178][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.212229][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.222989][ T5929] netlink: 'syz.2.6': attribute type 10 has an invalid length. [ 67.233364][ T5929] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6'. [ 67.263336][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.274138][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.284722][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.295648][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.306781][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.318716][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.329587][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.340340][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.351417][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.368178][ T5852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.377010][ T5852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.386319][ T5852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.411901][ T5852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.456590][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.479574][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.573963][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.598266][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.624696][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.642698][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.680443][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.693361][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.728414][ T5849] Bluetooth: hci0: command tx timeout [ 67.733917][ T5847] Bluetooth: hci2: command tx timeout [ 67.801148][ T3542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.819202][ T5847] Bluetooth: hci4: command tx timeout [ 67.821665][ T5849] Bluetooth: hci1: command tx timeout [ 67.825100][ T5847] Bluetooth: hci3: command tx timeout [ 67.867334][ T3542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.030547][ T5940] sctp: [Deprecated]: syz.1.2 (pid 5940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 68.030547][ T5940] Use struct sctp_sack_info instead [ 68.052324][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.093933][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.164548][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 68.195652][ T5948] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.544176][ T5958] x_tables: eb_tables: statistic.0 match: invalid size 24 (kernel) != (user) 0 [ 68.585007][ T5955] Illegal XDP return value 4294967274 on prog (id 6) dev N/A, expect packet loss! [ 68.628244][ T5942] syz.1.2 (5942) used greatest stack depth: 17584 bytes left [ 68.646694][ T5966] Zero length message leads to an empty skb [ 69.542975][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 69.608167][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 69.628629][ T6015] netlink: 'syz.1.23': attribute type 4 has an invalid length. [ 69.819275][ T5847] Bluetooth: hci0: command tx timeout [ 69.819439][ T5857] Bluetooth: hci2: command tx timeout [ 69.888546][ T5857] Bluetooth: hci1: command tx timeout [ 69.891256][ T5847] Bluetooth: hci4: command tx timeout [ 69.893980][ T5857] Bluetooth: hci3: command tx timeout [ 70.235916][ T6040] warning: `syz.0.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.325316][ T6045] bridge0: port 3(vlan2) entered blocking state [ 70.335088][ T6045] bridge0: port 3(vlan2) entered disabled state [ 70.342985][ T6026] delete_channel: no stack [ 70.345543][ T6045] vlan2: entered allmulticast mode [ 70.372019][ T6045] vlan2: left allmulticast mode [ 70.409333][ T6047] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 70.417209][ T6047] netlink: 112 bytes leftover after parsing attributes in process `syz.2.38'. [ 70.433647][ T6040] netlink: 'syz.0.36': attribute type 10 has an invalid length. [ 70.442450][ T6040] netlink: 2 bytes leftover after parsing attributes in process `syz.0.36'. [ 70.472992][ T6040] team0: entered promiscuous mode [ 70.505443][ T6040] team_slave_0: entered promiscuous mode [ 70.548145][ T6040] team_slave_1: entered promiscuous mode [ 70.565137][ T6040] bridge0: port 3(team0) entered blocking state [ 70.586891][ T6040] bridge0: port 3(team0) entered disabled state [ 70.602722][ T6040] team0: entered allmulticast mode [ 70.616374][ T6040] team_slave_0: entered allmulticast mode [ 70.629528][ T6040] team_slave_1: entered allmulticast mode [ 70.639033][ T6040] bridge0: port 3(team0) entered blocking state [ 70.645657][ T6040] bridge0: port 3(team0) entered forwarding state [ 71.652601][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.659461][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.978172][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 72.456859][ T6085] pim6reg1: entered allmulticast mode [ 72.467106][ T6087] netlink: 'syz.3.50': attribute type 1 has an invalid length. [ 72.478920][ T6087] netlink: 76 bytes leftover after parsing attributes in process `syz.3.50'. [ 72.850033][ T6106] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 72.878958][ T6106] macvlan2: entered allmulticast mode [ 72.904932][ T6106] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 72.961058][ T6112] tap0: tun_chr_ioctl cmd 1074025677 [ 72.987042][ T6112] tap0: linktype set to 0 [ 73.911561][ T6168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.76'. [ 73.928975][ T6163] sctp: failed to load transform for md5: -2 [ 74.215810][ T6181] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.244478][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.80'. [ 74.639276][ T6205] Bluetooth: MGMT ver 1.23 [ 74.656830][ T6205] syzkaller0: entered allmulticast mode [ 74.764567][ T6213] netlink: 'syz.2.88': attribute type 10 has an invalid length. [ 74.800493][ T6213] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.823144][ T6213] bond0: (slave team0): Enslaving as an active interface with an up link [ 74.871397][ T6215] sch_fq: defrate 167 ignored. [ 75.370726][ T6241] ax25_connect(): syz.1.95 uses autobind, please contact jreuter@yaina.de [ 75.885337][ T6236] netlink: 'syz.0.94': attribute type 4 has an invalid length. [ 76.068265][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 76.174976][ T6244] netlink: 'syz.2.96': attribute type 9 has an invalid length. [ 76.205156][ T6258] xfrm1: entered allmulticast mode [ 76.206965][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 76.216383][ T6262] syz.4.101 uses obsolete (PF_INET,SOCK_PACKET) [ 76.255403][ T6262] syzkaller1: entered promiscuous mode [ 76.261095][ T6262] syzkaller1: entered allmulticast mode [ 76.545197][ T6269] netlink: 'syz.1.104': attribute type 3 has an invalid length. [ 76.613989][ T6276] xt_CT: No such helper "netbios-ns" [ 76.719056][ T6276] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.106'. [ 76.744511][ T6283] netlink: 'syz.1.108': attribute type 1 has an invalid length. [ 76.753543][ T6283] netlink: 'syz.1.108': attribute type 2 has an invalid length. [ 76.762551][ T6276] netlink: 104 bytes leftover after parsing attributes in process `syz.4.106'. [ 76.775389][ T968] cfg80211: failed to load regulatory.db [ 76.789691][ T6283] netlink: 'syz.1.108': attribute type 1 has an invalid length. [ 78.868606][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'. [ 79.025049][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.116'. [ 79.129152][ T6310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.115'. [ 79.144319][ T6320] netlink: 100 bytes leftover after parsing attributes in process `syz.4.120'. [ 79.352156][ T1077] syzkaller0: tun_net_xmit 76 [ 79.357331][ T1077] syzkaller0: tun_net_xmit 48 [ 79.378051][ T25] syzkaller0: tun_net_xmit 76 [ 79.647984][ T5890] syzkaller0: tun_net_xmit 76 [ 79.676599][ T6334] netlink: 'syz.4.124': attribute type 39 has an invalid length. [ 79.709198][ T5890] syzkaller0: tun_net_xmit 76 [ 81.473542][ T6360] FAULT_INJECTION: forcing a failure. [ 81.473542][ T6360] name failslab, interval 1, probability 0, space 0, times 1 [ 81.514520][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz.0.132 Not tainted 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 81.525176][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.535281][ T6360] Call Trace: [ 81.538595][ T6360] [ 81.541608][ T6360] dump_stack_lvl+0x241/0x360 [ 81.546351][ T6360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.551591][ T6360] ? __pfx__printk+0x10/0x10 [ 81.556232][ T6360] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 81.561900][ T6360] ? __pfx___might_resched+0x10/0x10 [ 81.567228][ T6360] should_fail_ex+0x3b0/0x4e0 [ 81.571941][ T6360] ? vm_area_dup+0x61/0x290 [ 81.572319][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 81.576450][ T6360] should_failslab+0xac/0x100 [ 81.586610][ T6366] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 81.589919][ T6360] ? vm_area_dup+0x61/0x290 [ 81.589947][ T6360] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 81.589973][ T6360] vm_area_dup+0x61/0x290 [ 81.589994][ T6360] __split_vma+0x1cb/0xc50 [ 81.590014][ T6360] ? __pfx_lockdep_unlock+0x10/0x10 [ 81.590037][ T6360] ? __kernel_text_address+0xd/0x40 [ 81.590056][ T6360] ? unwind_get_return_address+0x4d/0x90 [ 81.590085][ T6360] ? __pfx___split_vma+0x10/0x10 [ 81.590104][ T6360] ? validate_chain+0x15c0/0x5920 [ 81.642233][ T6360] vms_gather_munmap_vmas+0x2ee/0x15d0 [ 81.647759][ T6360] ? mtree_range_walk+0x6fd/0x8e0 [ 81.652820][ T6360] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 81.658772][ T6360] ? mas_find+0x8c0/0xbb0 [ 81.663144][ T6360] mmap_region+0x7fc/0x2940 [ 81.667710][ T6360] ? __pfx_mmap_region+0x10/0x10 [ 81.672682][ T6360] ? __pfx_lock_acquire+0x10/0x10 [ 81.677740][ T6360] ? mm_get_unmapped_area+0xa8/0xd0 [ 81.682956][ T6360] ? bpf_lsm_mmap_addr+0x9/0x10 [ 81.687802][ T6360] ? security_mmap_addr+0x6f/0x250 [ 81.692921][ T6360] ? __get_unmapped_area+0x2ed/0x350 [ 81.698221][ T6360] do_mmap+0x8f0/0x1000 [ 81.702388][ T6360] ? __pfx_do_mmap+0x10/0x10 [ 81.706979][ T6360] ? __pfx_down_write_killable+0x10/0x10 [ 81.712606][ T6360] ? common_file_perm+0x1a6/0x210 [ 81.717634][ T6360] vm_mmap_pgoff+0x1dd/0x3d0 [ 81.722227][ T6360] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 81.727330][ T6360] ? __fget_files+0x29/0x470 [ 81.731918][ T6360] ? __fget_files+0x3f3/0x470 [ 81.736595][ T6360] ? __fget_files+0x29/0x470 [ 81.741186][ T6360] ksys_mmap_pgoff+0x4eb/0x720 [ 81.745956][ T6360] ? __x64_sys_mmap+0x7f/0x140 [ 81.750811][ T6360] do_syscall_64+0xf3/0x230 [ 81.755486][ T6360] ? clear_bhb_loop+0x35/0x90 [ 81.760161][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.766065][ T6360] RIP: 0033:0x7fa0f297e719 [ 81.770580][ T6360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.790191][ T6360] RSP: 002b:00007fa0f383a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 81.798605][ T6360] RAX: ffffffffffffffda RBX: 00007fa0f2b35f80 RCX: 00007fa0f297e719 [ 81.806574][ T6360] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffc000 [ 81.814552][ T6360] RBP: 00007fa0f383a090 R08: 0000000000000004 R09: 0000000000001000 [ 81.822525][ T6360] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 81.830494][ T6360] R13: 0000000000000000 R14: 00007fa0f2b35f80 R15: 00007ffd448e7c98 [ 81.838474][ T6360] [ 81.935292][ T6375] netlink: 'syz.1.138': attribute type 10 has an invalid length. [ 81.935644][ T6368] netlink: 604 bytes leftover after parsing attributes in process `syz.4.135'. [ 81.956276][ T6375] hsr0: entered promiscuous mode [ 82.001016][ T6375] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 82.038222][ T6375] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 82.058824][ T6375] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 82.094797][ T6375] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 82.249769][ T6388] bond1 (unregistering): Released all slaves [ 82.290354][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 82.306649][ T11] syzkaller0: tun_net_xmit 76 [ 82.322167][ T11] syzkaller0: tun_net_xmit 48 [ 82.329955][ T25] syzkaller0: tun_net_xmit 76 [ 82.644721][ T6411] FAULT_INJECTION: forcing a failure. [ 82.644721][ T6411] name failslab, interval 1, probability 0, space 0, times 0 [ 82.665935][ T6411] CPU: 0 UID: 0 PID: 6411 Comm: syz.4.150 Not tainted 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 82.676598][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.686679][ T6411] Call Trace: [ 82.689969][ T6411] [ 82.693095][ T6411] dump_stack_lvl+0x241/0x360 [ 82.697803][ T6411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.703038][ T6411] ? __pfx__printk+0x10/0x10 [ 82.707651][ T6411] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 82.713219][ T6411] ? __pfx___might_resched+0x10/0x10 [ 82.718553][ T6411] should_fail_ex+0x3b0/0x4e0 [ 82.723259][ T6411] ? mas_alloc_nodes+0x26c/0x840 [ 82.728225][ T6411] should_failslab+0xac/0x100 [ 82.732931][ T6411] ? mas_alloc_nodes+0x26c/0x840 [ 82.737905][ T6411] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 82.743319][ T6411] mas_alloc_nodes+0x26c/0x840 [ 82.748127][ T6411] mas_preallocate+0x554/0x8c0 [ 82.752931][ T6411] ? __pfx_mas_preallocate+0x10/0x10 [ 82.758263][ T6411] ? __mas_set_range+0x133/0x3c0 [ 82.763244][ T6411] __split_vma+0x302/0xc50 [ 82.767701][ T6411] ? process_measurement+0x1aea/0x1fb0 [ 82.773204][ T6411] ? __pfx___split_vma+0x10/0x10 [ 82.778181][ T6411] ? validate_chain+0x11e/0x5920 [ 82.783168][ T6411] vms_gather_munmap_vmas+0x2ee/0x15d0 [ 82.788679][ T6411] ? __lock_acquire+0x1384/0x2050 [ 82.793763][ T6411] ? mtree_range_walk+0x6fd/0x8e0 [ 82.798835][ T6411] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 82.804781][ T6411] ? mas_find+0x8c0/0xbb0 [ 82.809161][ T6411] mmap_region+0x7fc/0x2940 [ 82.813738][ T6411] ? __pfx_mmap_region+0x10/0x10 [ 82.818744][ T6411] ? __pfx_lock_acquire+0x10/0x10 [ 82.823823][ T6411] ? mm_get_unmapped_area+0xa8/0xd0 [ 82.829084][ T6411] ? bpf_lsm_mmap_addr+0x9/0x10 [ 82.833973][ T6411] ? security_mmap_addr+0x6f/0x250 [ 82.839121][ T6411] ? __get_unmapped_area+0x2ed/0x350 [ 82.844496][ T6411] do_mmap+0x8f0/0x1000 [ 82.848706][ T6411] ? __pfx_do_mmap+0x10/0x10 [ 82.853338][ T6411] ? __pfx_down_write_killable+0x10/0x10 [ 82.859006][ T6411] ? common_file_perm+0x1a6/0x210 [ 82.861826][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'. [ 82.864055][ T6411] vm_mmap_pgoff+0x1dd/0x3d0 [ 82.864089][ T6411] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 82.882654][ T6411] ? __fget_files+0x29/0x470 [ 82.887284][ T6411] ? __fget_files+0x3f3/0x470 [ 82.891995][ T6411] ? __fget_files+0x29/0x470 [ 82.896629][ T6411] ksys_mmap_pgoff+0x4eb/0x720 [ 82.901432][ T6411] ? __x64_sys_mmap+0x7f/0x140 [ 82.906230][ T6411] do_syscall_64+0xf3/0x230 [ 82.910774][ T6411] ? clear_bhb_loop+0x35/0x90 [ 82.915483][ T6411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.921427][ T6411] RIP: 0033:0x7fbd1fd7e719 [ 82.925862][ T6411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.945497][ T6411] RSP: 002b:00007fbd1f7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 82.945553][ T6421] xt_CT: No such helper "syz0" [ 82.953926][ T6411] RAX: ffffffffffffffda RBX: 00007fbd1ff35f80 RCX: 00007fbd1fd7e719 [ 82.953942][ T6411] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffc000 [ 82.953954][ T6411] RBP: 00007fbd1f7ff090 R08: 0000000000000004 R09: 0000000000001000 [ 82.953967][ T6411] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 82.953978][ T6411] R13: 0000000000000000 R14: 00007fbd1ff35f80 R15: 00007ffd1f13f938 [ 82.954005][ T6411] [ 83.572013][ T6452] raw_sendmsg: syz.2.160 forgot to set AF_INET. Fix it! [ 83.746674][ T6458] FAULT_INJECTION: forcing a failure. [ 83.746674][ T6458] name failslab, interval 1, probability 0, space 0, times 0 [ 83.759863][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.4.163 Not tainted 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 83.770582][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.780662][ T6458] Call Trace: [ 83.783958][ T6458] [ 83.786931][ T6458] dump_stack_lvl+0x241/0x360 [ 83.791652][ T6458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.796892][ T6458] ? __pfx__printk+0x10/0x10 [ 83.801554][ T6458] ? kmem_cache_alloc_bulk_noprof+0x51/0x7c0 [ 83.807586][ T6458] ? __pfx___might_resched+0x10/0x10 [ 83.812905][ T6458] should_fail_ex+0x3b0/0x4e0 [ 83.817612][ T6458] should_failslab+0xac/0x100 [ 83.822322][ T6458] kmem_cache_alloc_bulk_noprof+0x7d/0x7c0 [ 83.828168][ T6458] ? mas_alloc_nodes+0x26c/0x840 [ 83.833140][ T6458] ? mas_alloc_nodes+0x26c/0x840 [ 83.838111][ T6458] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 83.843519][ T6458] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 83.849203][ T6458] mas_alloc_nodes+0x3d5/0x840 [ 83.854008][ T6458] mas_preallocate+0x554/0x8c0 [ 83.858810][ T6458] ? __pfx_mas_preallocate+0x10/0x10 [ 83.864117][ T6458] ? __mas_set_range+0x133/0x3c0 [ 83.869074][ T6458] __split_vma+0x302/0xc50 [ 83.873532][ T6458] ? process_measurement+0x1aea/0x1fb0 [ 83.879006][ T6458] ? __pfx___split_vma+0x10/0x10 [ 83.883957][ T6458] ? validate_chain+0x11e/0x5920 [ 83.888897][ T6458] vms_gather_munmap_vmas+0x2ee/0x15d0 [ 83.894359][ T6458] ? __lock_acquire+0x1384/0x2050 [ 83.899407][ T6458] ? mtree_range_walk+0x6fd/0x8e0 [ 83.904429][ T6458] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 83.910317][ T6458] ? mas_find+0x8c0/0xbb0 [ 83.914676][ T6458] mmap_region+0x7fc/0x2940 [ 83.917444][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 83.919212][ T6458] ? __pfx_mmap_region+0x10/0x10 [ 83.919262][ T6458] ? __pfx_lock_acquire+0x10/0x10 [ 83.919304][ T6458] ? mm_get_unmapped_area+0xa8/0xd0 [ 83.919340][ T6458] ? bpf_lsm_mmap_addr+0x9/0x10 [ 83.919358][ T6458] ? security_mmap_addr+0x6f/0x250 [ 83.919378][ T6458] ? __get_unmapped_area+0x2ed/0x350 [ 83.919406][ T6458] do_mmap+0x8f0/0x1000 [ 83.919438][ T6458] ? __pfx_do_mmap+0x10/0x10 [ 83.967510][ T6458] ? __pfx_down_write_killable+0x10/0x10 [ 83.973173][ T6458] ? common_file_perm+0x1a6/0x210 [ 83.978226][ T6458] vm_mmap_pgoff+0x1dd/0x3d0 [ 83.982814][ T6458] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 83.987918][ T6458] ? __fget_files+0x29/0x470 [ 83.992502][ T6458] ? __fget_files+0x3f3/0x470 [ 83.997190][ T6458] ? __fget_files+0x29/0x470 [ 84.001805][ T6458] ksys_mmap_pgoff+0x4eb/0x720 [ 84.006599][ T6458] ? __x64_sys_mmap+0x7f/0x140 [ 84.011356][ T6458] do_syscall_64+0xf3/0x230 [ 84.015853][ T6458] ? clear_bhb_loop+0x35/0x90 [ 84.020542][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.026477][ T6458] RIP: 0033:0x7fbd1fd7e719 [ 84.030884][ T6458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.050486][ T6458] RSP: 002b:00007fbd1f7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 84.058908][ T6458] RAX: ffffffffffffffda RBX: 00007fbd1ff35f80 RCX: 00007fbd1fd7e719 [ 84.066894][ T6458] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffc000 [ 84.074895][ T6458] RBP: 00007fbd1f7ff090 R08: 0000000000000004 R09: 0000000000001000 [ 84.082867][ T6458] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 84.090839][ T6458] R13: 0000000000000000 R14: 00007fbd1ff35f80 R15: 00007ffd1f13f938 [ 84.098816][ T6458] [ 85.314428][ T6483] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.170'. [ 85.497062][ T6494] x_tables: duplicate underflow at hook 1 [ 85.534313][ T6499] FAULT_INJECTION: forcing a failure. [ 85.534313][ T6499] name failslab, interval 1, probability 0, space 0, times 0 [ 85.558639][ T6499] CPU: 0 UID: 0 PID: 6499 Comm: syz.4.176 Not tainted 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 85.569291][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 85.579380][ T6499] Call Trace: [ 85.582691][ T6499] [ 85.585653][ T6499] dump_stack_lvl+0x241/0x360 [ 85.590374][ T6499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.595610][ T6499] ? __pfx__printk+0x10/0x10 [ 85.600237][ T6499] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 85.605830][ T6499] ? __pfx___might_resched+0x10/0x10 [ 85.611154][ T6499] should_fail_ex+0x3b0/0x4e0 [ 85.615866][ T6499] ? vm_area_dup+0x27/0x290 [ 85.620406][ T6499] should_failslab+0xac/0x100 [ 85.625123][ T6499] ? vm_area_dup+0x27/0x290 [ 85.629673][ T6499] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 85.635103][ T6499] vm_area_dup+0x27/0x290 [ 85.639472][ T6499] __split_vma+0x1cb/0xc50 [ 85.643928][ T6499] ? __pfx___split_vma+0x10/0x10 [ 85.648963][ T6499] ? mas_find+0x950/0xbb0 [ 85.653298][ T6499] vms_gather_munmap_vmas+0x4b2/0x15d0 [ 85.658752][ T6499] ? __lock_acquire+0x1384/0x2050 [ 85.663798][ T6499] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 85.669697][ T6499] ? mas_find+0x8c0/0xbb0 [ 85.674029][ T6499] mmap_region+0x7fc/0x2940 [ 85.678554][ T6499] ? __pfx_mmap_region+0x10/0x10 [ 85.683595][ T6499] ? __pfx_lock_acquire+0x10/0x10 [ 85.688645][ T6499] ? mm_get_unmapped_area+0xa8/0xd0 [ 85.693851][ T6499] ? bpf_lsm_mmap_addr+0x9/0x10 [ 85.698695][ T6499] ? security_mmap_addr+0x6f/0x250 [ 85.703800][ T6499] ? __get_unmapped_area+0x2ed/0x350 [ 85.709091][ T6499] do_mmap+0x8f0/0x1000 [ 85.713260][ T6499] ? __pfx_do_mmap+0x10/0x10 [ 85.717848][ T6499] ? __pfx_down_write_killable+0x10/0x10 [ 85.723514][ T6499] ? common_file_perm+0x1a6/0x210 [ 85.728647][ T6499] vm_mmap_pgoff+0x1dd/0x3d0 [ 85.733238][ T6499] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 85.738356][ T6499] ? __fget_files+0x29/0x470 [ 85.742945][ T6499] ? __fget_files+0x3f3/0x470 [ 85.747620][ T6499] ? __fget_files+0x29/0x470 [ 85.752219][ T6499] ksys_mmap_pgoff+0x4eb/0x720 [ 85.756984][ T6499] ? __x64_sys_mmap+0x7f/0x140 [ 85.761747][ T6499] do_syscall_64+0xf3/0x230 [ 85.766248][ T6499] ? clear_bhb_loop+0x35/0x90 [ 85.770925][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.776820][ T6499] RIP: 0033:0x7fbd1fd7e719 [ 85.781235][ T6499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.800837][ T6499] RSP: 002b:00007fbd1f7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 85.809338][ T6499] RAX: ffffffffffffffda RBX: 00007fbd1ff35f80 RCX: 00007fbd1fd7e719 [ 85.817304][ T6499] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffc000 [ 85.825299][ T6499] RBP: 00007fbd1f7ff090 R08: 0000000000000004 R09: 0000000000001000 [ 85.833366][ T6499] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 85.841334][ T6499] R13: 0000000000000000 R14: 00007fbd1ff35f80 R15: 00007ffd1f13f938 [ 85.849318][ T6499] [ 85.923861][ T6508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.179'. [ 85.962797][ T6508] bond1: entered allmulticast mode [ 86.009346][ T6512] netlink: 44 bytes leftover after parsing attributes in process `syz.2.179'. [ 86.459093][ T6534] netlink: 'syz.1.188': attribute type 6 has an invalid length. [ 86.523940][ T6549] netlink: 64 bytes leftover after parsing attributes in process `syz.1.191'. [ 87.915690][ T6556] syzkaller1: entered promiscuous mode [ 87.931803][ T6556] syzkaller1: entered allmulticast mode [ 87.982689][ T6561] FAULT_INJECTION: forcing a failure. [ 87.982689][ T6561] name failslab, interval 1, probability 0, space 0, times 0 [ 88.017808][ T6561] CPU: 1 UID: 0 PID: 6561 Comm: syz.2.193 Not tainted 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 88.028465][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.038556][ T6561] Call Trace: [ 88.041858][ T6561] [ 88.044811][ T6561] dump_stack_lvl+0x241/0x360 [ 88.049620][ T6561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.054856][ T6561] ? __pfx__printk+0x10/0x10 [ 88.059486][ T6561] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 88.065071][ T6561] ? __pfx___might_resched+0x10/0x10 [ 88.070400][ T6561] should_fail_ex+0x3b0/0x4e0 [ 88.075116][ T6561] ? vm_area_dup+0x61/0x290 [ 88.079661][ T6561] should_failslab+0xac/0x100 [ 88.084369][ T6561] ? vm_area_dup+0x61/0x290 [ 88.088902][ T6561] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 88.094311][ T6561] vm_area_dup+0x61/0x290 [ 88.098677][ T6561] __split_vma+0x1cb/0xc50 [ 88.103135][ T6561] ? __pfx___split_vma+0x10/0x10 [ 88.108110][ T6561] ? mas_find+0x950/0xbb0 [ 88.112475][ T6561] vms_gather_munmap_vmas+0x4b2/0x15d0 [ 88.117968][ T6561] ? __lock_acquire+0x1384/0x2050 [ 88.123051][ T6561] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 88.128994][ T6561] ? mas_find+0x8c0/0xbb0 [ 88.133366][ T6561] mmap_region+0x7fc/0x2940 [ 88.137933][ T6561] ? __pfx_mmap_region+0x10/0x10 [ 88.142928][ T6561] ? __pfx_lock_acquire+0x10/0x10 [ 88.148088][ T6561] ? mm_get_unmapped_area+0xa8/0xd0 [ 88.153297][ T6561] ? bpf_lsm_mmap_addr+0x9/0x10 [ 88.158178][ T6561] ? security_mmap_addr+0x6f/0x250 [ 88.163312][ T6561] ? __get_unmapped_area+0x2ed/0x350 [ 88.168603][ T6561] do_mmap+0x8f0/0x1000 [ 88.172776][ T6561] ? __pfx_do_mmap+0x10/0x10 [ 88.177362][ T6561] ? __pfx_down_write_killable+0x10/0x10 [ 88.182996][ T6561] ? common_file_perm+0x1a6/0x210 [ 88.188050][ T6561] vm_mmap_pgoff+0x1dd/0x3d0 [ 88.192712][ T6561] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 88.197840][ T6561] ? __fget_files+0x29/0x470 [ 88.202457][ T6561] ? __fget_files+0x3f3/0x470 [ 88.207164][ T6561] ? __fget_files+0x29/0x470 [ 88.211763][ T6561] ksys_mmap_pgoff+0x4eb/0x720 [ 88.216543][ T6561] ? __x64_sys_mmap+0x7f/0x140 [ 88.221325][ T6561] do_syscall_64+0xf3/0x230 [ 88.225902][ T6561] ? clear_bhb_loop+0x35/0x90 [ 88.230604][ T6561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.236502][ T6561] RIP: 0033:0x7fd38d17e719 [ 88.240933][ T6561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.260577][ T6561] RSP: 002b:00007fd38df15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 88.269010][ T6561] RAX: ffffffffffffffda RBX: 00007fd38d335f80 RCX: 00007fd38d17e719 [ 88.276997][ T6561] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffc000 [ 88.284972][ T6561] RBP: 00007fd38df15090 R08: 0000000000000004 R09: 0000000000001000 [ 88.292960][ T6561] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 88.300969][ T6561] R13: 0000000000000000 R14: 00007fd38d335f80 R15: 00007ffeb9095028 [ 88.308954][ T6561] [ 88.392973][ T6569] netlink: 'syz.0.196': attribute type 1 has an invalid length. [ 88.506914][ T6579] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 88.533482][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 88.786707][ T6595] netlink: 332 bytes leftover after parsing attributes in process `syz.2.203'. [ 88.861139][ T6600] netlink: 332 bytes leftover after parsing attributes in process `syz.2.203'. [ 89.127976][ T6619] FAULT_INJECTION: forcing a failure. [ 89.127976][ T6619] name failslab, interval 1, probability 0, space 0, times 0 [ 89.140868][ T6619] CPU: 0 UID: 0 PID: 6619 Comm: syz.4.207 Not tainted 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 89.151496][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 89.161570][ T6619] Call Trace: [ 89.164863][ T6619] [ 89.167820][ T6619] dump_stack_lvl+0x241/0x360 [ 89.172589][ T6619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.177798][ T6619] ? __pfx__printk+0x10/0x10 [ 89.182392][ T6619] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 89.187943][ T6619] ? __pfx___might_resched+0x10/0x10 [ 89.193234][ T6619] should_fail_ex+0x3b0/0x4e0 [ 89.197923][ T6619] ? vm_area_dup+0x61/0x290 [ 89.202456][ T6619] should_failslab+0xac/0x100 [ 89.207163][ T6619] ? vm_area_dup+0x61/0x290 [ 89.211695][ T6619] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 89.217099][ T6619] vm_area_dup+0x61/0x290 [ 89.221463][ T6619] __split_vma+0x1cb/0xc50 [ 89.225932][ T6619] ? __pfx___split_vma+0x10/0x10 [ 89.230889][ T6619] ? mas_find+0x950/0xbb0 [ 89.235229][ T6619] vms_gather_munmap_vmas+0x4b2/0x15d0 [ 89.240704][ T6619] ? __lock_acquire+0x1384/0x2050 [ 89.245755][ T6619] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 89.251669][ T6619] ? mas_find+0x8c0/0xbb0 [ 89.256027][ T6619] mmap_region+0x7fc/0x2940 [ 89.260557][ T6619] ? __pfx_mmap_region+0x10/0x10 [ 89.265520][ T6619] ? __pfx_lock_acquire+0x10/0x10 [ 89.270563][ T6619] ? mm_get_unmapped_area+0xa8/0xd0 [ 89.275784][ T6619] ? bpf_lsm_mmap_addr+0x9/0x10 [ 89.280635][ T6619] ? security_mmap_addr+0x6f/0x250 [ 89.285743][ T6619] ? __get_unmapped_area+0x2ed/0x350 [ 89.291037][ T6619] do_mmap+0x8f0/0x1000 [ 89.295201][ T6619] ? __pfx_do_mmap+0x10/0x10 [ 89.299795][ T6619] ? __pfx_down_write_killable+0x10/0x10 [ 89.305427][ T6619] ? common_file_perm+0x1a6/0x210 [ 89.310458][ T6619] vm_mmap_pgoff+0x1dd/0x3d0 [ 89.315051][ T6619] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 89.320158][ T6619] ? __fget_files+0x29/0x470 [ 89.324752][ T6619] ? __fget_files+0x3f3/0x470 [ 89.329439][ T6619] ? __fget_files+0x29/0x470 [ 89.334036][ T6619] ksys_mmap_pgoff+0x4eb/0x720 [ 89.338803][ T6619] ? __x64_sys_mmap+0x7f/0x140 [ 89.343567][ T6619] do_syscall_64+0xf3/0x230 [ 89.348068][ T6619] ? clear_bhb_loop+0x35/0x90 [ 89.352745][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.358638][ T6619] RIP: 0033:0x7fbd1fd7e719 [ 89.363062][ T6619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.382757][ T6619] RSP: 002b:00007fbd1f7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 89.391179][ T6619] RAX: ffffffffffffffda RBX: 00007fbd1ff35f80 RCX: 00007fbd1fd7e719 [ 89.399195][ T6619] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffc000 [ 89.407174][ T6619] RBP: 00007fbd1f7ff090 R08: 0000000000000004 R09: 0000000000001000 [ 89.415141][ T6619] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 89.423109][ T6619] R13: 0000000000000000 R14: 00007fbd1ff35f80 R15: 00007ffd1f13f938 [ 89.431102][ T6619] [ 90.857294][ T6634] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 92.224663][ T6642] tipc: Enabling of bearer rejected, failed to enable media [ 92.378593][ T6662] sctp: failed to load transform for md5: -2 [ 92.403323][ T6669] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 92.654656][ T6680] FAULT_INJECTION: forcing a failure. [ 92.654656][ T6680] name failslab, interval 1, probability 0, space 0, times 0 [ 92.684904][ T6680] CPU: 0 UID: 0 PID: 6680 Comm: syz.4.219 Not tainted 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 92.695648][ T6680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.705732][ T6680] Call Trace: [ 92.709048][ T6680] [ 92.712013][ T6680] dump_stack_lvl+0x241/0x360 [ 92.716732][ T6680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.721963][ T6680] ? __pfx__printk+0x10/0x10 [ 92.726593][ T6680] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 92.732171][ T6680] ? __pfx___might_resched+0x10/0x10 [ 92.737491][ T6680] should_fail_ex+0x3b0/0x4e0 [ 92.742204][ T6680] ? mas_alloc_nodes+0x26c/0x840 [ 92.747172][ T6680] should_failslab+0xac/0x100 [ 92.751868][ T6680] ? mas_alloc_nodes+0x26c/0x840 [ 92.756811][ T6680] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 92.762188][ T6680] mas_alloc_nodes+0x26c/0x840 [ 92.766956][ T6680] mas_preallocate+0x554/0x8c0 [ 92.771723][ T6680] ? vma_interval_tree_remove+0x738/0xae0 [ 92.777442][ T6680] ? __pfx_mas_preallocate+0x10/0x10 [ 92.782737][ T6680] ? __mas_set_range+0x133/0x3c0 [ 92.787679][ T6680] commit_merge+0x3ff/0x760 [ 92.792199][ T6680] ? __pfx_commit_merge+0x10/0x10 [ 92.797229][ T6680] ? dup_anon_vma+0x7d/0x2b0 [ 92.801825][ T6680] vma_expand+0x658/0x8b0 [ 92.806159][ T6680] ? __pfx_vma_expand+0x10/0x10 [ 92.811022][ T6680] ? anon_vma_name+0x86/0xf0 [ 92.815615][ T6680] ? can_vma_merge_right+0x454/0x500 [ 92.820901][ T6680] vma_merge_new_range+0x72f/0xa00 [ 92.826023][ T6680] mmap_region+0x1070/0x2940 [ 92.830633][ T6680] ? __pfx_mmap_region+0x10/0x10 [ 92.835587][ T6680] ? __pfx_lock_acquire+0x10/0x10 [ 92.840641][ T6680] ? mm_get_unmapped_area+0xa8/0xd0 [ 92.845849][ T6680] ? bpf_lsm_mmap_addr+0x9/0x10 [ 92.850696][ T6680] ? security_mmap_addr+0x6f/0x250 [ 92.855841][ T6680] ? __get_unmapped_area+0x2ed/0x350 [ 92.861135][ T6680] do_mmap+0x8f0/0x1000 [ 92.865299][ T6680] ? __pfx_do_mmap+0x10/0x10 [ 92.869890][ T6680] ? __pfx_down_write_killable+0x10/0x10 [ 92.875518][ T6680] ? common_file_perm+0x1a6/0x210 [ 92.880549][ T6680] vm_mmap_pgoff+0x1dd/0x3d0 [ 92.885140][ T6680] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 92.890256][ T6680] ? __fget_files+0x29/0x470 [ 92.894845][ T6680] ? __fget_files+0x3f3/0x470 [ 92.899615][ T6680] ? __fget_files+0x29/0x470 [ 92.904208][ T6680] ksys_mmap_pgoff+0x4eb/0x720 [ 92.908985][ T6680] ? __x64_sys_mmap+0x7f/0x140 [ 92.913755][ T6680] do_syscall_64+0xf3/0x230 [ 92.918256][ T6680] ? clear_bhb_loop+0x35/0x90 [ 92.922926][ T6680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.928816][ T6680] RIP: 0033:0x7fbd1fd7e719 [ 92.933230][ T6680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.952836][ T6680] RSP: 002b:00007fbd1f7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 92.961252][ T6680] RAX: ffffffffffffffda RBX: 00007fbd1ff35f80 RCX: 00007fbd1fd7e719 [ 92.969221][ T6680] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffc000 [ 92.977194][ T6680] RBP: 00007fbd1f7ff090 R08: 0000000000000004 R09: 0000000000001000 [ 92.985163][ T6680] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 92.993129][ T6680] R13: 0000000000000000 R14: 00007fbd1ff35f80 R15: 00007ffd1f13f938 [ 93.001107][ T6680] [ 93.020921][ T6694] netlink: 'syz.0.223': attribute type 12 has an invalid length. [ 93.108655][ T6696] pimreg3: entered allmulticast mode [ 93.136642][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 93.225123][ T6696] pimreg3: left allmulticast mode [ 95.043113][ T6741] netlink: 'syz.4.235': attribute type 1 has an invalid length. [ 95.104392][ T6741] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.235'. [ 95.126940][ T6746] FAULT_INJECTION: forcing a failure. [ 95.126940][ T6746] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.135067][ T6741] netlink: 3068 bytes leftover after parsing attributes in process `syz.4.235'. [ 95.187148][ T6746] CPU: 0 UID: 0 PID: 6746 Comm: syz.3.237 Not tainted 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 95.197800][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 95.207889][ T6746] Call Trace: [ 95.211195][ T6746] [ 95.214144][ T6746] dump_stack_lvl+0x241/0x360 [ 95.218868][ T6746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.224112][ T6746] ? __pfx__printk+0x10/0x10 [ 95.228756][ T6746] ? snprintf+0xda/0x120 [ 95.233040][ T6746] should_fail_ex+0x3b0/0x4e0 [ 95.237756][ T6746] _copy_to_user+0x31/0xb0 [ 95.242204][ T6746] simple_read_from_buffer+0xca/0x150 [ 95.247600][ T6746] proc_fail_nth_read+0x1e9/0x250 [ 95.252656][ T6746] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.258228][ T6746] ? rw_verify_area+0x55e/0x6f0 [ 95.263093][ T6746] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.268653][ T6746] vfs_read+0x1fc/0xb70 [ 95.272826][ T6746] ? fdget_pos+0x24e/0x320 [ 95.277246][ T6746] ? __pfx_vfs_read+0x10/0x10 [ 95.281930][ T6746] ? __fget_files+0x3f3/0x470 [ 95.286614][ T6746] ? fdget_pos+0x24e/0x320 [ 95.291032][ T6746] ksys_read+0x183/0x2b0 [ 95.295274][ T6746] ? __pfx_ksys_read+0x10/0x10 [ 95.300036][ T6746] ? do_syscall_64+0x100/0x230 [ 95.304799][ T6746] ? do_syscall_64+0xb6/0x230 [ 95.309561][ T6746] do_syscall_64+0xf3/0x230 [ 95.314064][ T6746] ? clear_bhb_loop+0x35/0x90 [ 95.318737][ T6746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.324631][ T6746] RIP: 0033:0x7f12a0d7d15c [ 95.329049][ T6746] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 95.348669][ T6746] RSP: 002b:00007f12a1ad4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 95.357087][ T6746] RAX: ffffffffffffffda RBX: 00007f12a0f35f80 RCX: 00007f12a0d7d15c [ 95.365057][ T6746] RDX: 000000000000000f RSI: 00007f12a1ad40a0 RDI: 0000000000000005 [ 95.373031][ T6746] RBP: 00007f12a1ad4090 R08: 0000000000000000 R09: 0000000000001000 [ 95.381025][ T6746] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 95.389004][ T6746] R13: 0000000000000000 R14: 00007f12a0f35f80 R15: 00007fff7e7e34a8 [ 95.396993][ T6746] [ 95.415920][ T6755] netlink: 'syz.0.239': attribute type 1 has an invalid length. [ 95.682977][ T6757] netlink: 296 bytes leftover after parsing attributes in process `syz.1.241'. [ 95.694896][ T6766] netlink: 56 bytes leftover after parsing attributes in process `syz.3.243'. [ 95.704765][ T6768] netlink: 'syz.1.241': attribute type 33 has an invalid length. [ 95.720648][ T6768] netlink: 160 bytes leftover after parsing attributes in process `syz.1.241'. [ 95.756583][ T6757] netlink: 128 bytes leftover after parsing attributes in process `syz.1.241'. [ 95.814223][ T6766] netlink: 204 bytes leftover after parsing attributes in process `syz.3.243'. [ 96.165817][ T6792] bridge_slave_0: left allmulticast mode [ 96.172075][ T6792] bridge_slave_0: left promiscuous mode [ 96.178241][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.194802][ T6792] bridge_slave_1: left allmulticast mode [ 96.201017][ T6792] bridge_slave_1: left promiscuous mode [ 96.210051][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.222717][ T6792] bond0: (slave bond_slave_0): Releasing backup interface [ 96.237576][ T6792] bond0: (slave bond_slave_1): Releasing backup interface [ 96.272971][ T6792] team0: Port device team_slave_0 removed [ 96.293733][ T6792] team0: Port device team_slave_1 removed [ 96.302760][ T6792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.310966][ T6792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.322690][ T6792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.331897][ T6792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.345605][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 96.373801][ T6797] vlan0: entered promiscuous mode [ 97.564637][ T6822] netlink: 208 bytes leftover after parsing attributes in process `syz.0.260'. [ 98.140290][ T6814] netlink: 'syz.1.258': attribute type 5 has an invalid length. [ 98.359804][ T6841] netlink: 'syz.4.265': attribute type 4 has an invalid length. [ 98.367142][ T6839] __nla_validate_parse: 1 callbacks suppressed [ 98.367163][ T6839] netlink: 20 bytes leftover after parsing attributes in process `syz.2.262'. [ 98.387015][ T6843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.262'. [ 98.468765][ T6845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.490599][ T6846] netlink: 'syz.4.265': attribute type 4 has an invalid length. [ 98.563142][ T6853] sctp: [Deprecated]: syz.0.267 (pid 6853) Use of int in maxseg socket option. [ 98.563142][ T6853] Use struct sctp_assoc_value instead [ 98.578621][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 98.942495][ T6875] FAULT_INJECTION: forcing a failure. [ 98.942495][ T6875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.959350][ T6875] CPU: 0 UID: 0 PID: 6875 Comm: syz.3.274 Not tainted 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 98.969992][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.980075][ T6875] Call Trace: [ 98.983386][ T6875] [ 98.986336][ T6875] dump_stack_lvl+0x241/0x360 [ 98.991046][ T6875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.996285][ T6875] ? __pfx__printk+0x10/0x10 [ 99.000916][ T6875] ? snprintf+0xda/0x120 [ 99.005193][ T6875] should_fail_ex+0x3b0/0x4e0 [ 99.009911][ T6875] _copy_to_user+0x31/0xb0 [ 99.014362][ T6875] simple_read_from_buffer+0xca/0x150 [ 99.019782][ T6875] proc_fail_nth_read+0x1e9/0x250 [ 99.024841][ T6875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.030409][ T6875] ? rw_verify_area+0x55e/0x6f0 [ 99.035364][ T6875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.040910][ T6875] vfs_read+0x1fc/0xb70 [ 99.045070][ T6875] ? fdget_pos+0x24e/0x320 [ 99.049503][ T6875] ? __pfx_vfs_read+0x10/0x10 [ 99.054228][ T6875] ? __fget_files+0x3f3/0x470 [ 99.058967][ T6875] ? fdget_pos+0x24e/0x320 [ 99.063406][ T6875] ksys_read+0x183/0x2b0 [ 99.067757][ T6875] ? __pfx_ksys_read+0x10/0x10 [ 99.072545][ T6875] ? do_syscall_64+0x100/0x230 [ 99.077343][ T6875] ? do_syscall_64+0xb6/0x230 [ 99.082041][ T6875] do_syscall_64+0xf3/0x230 [ 99.086544][ T6875] ? clear_bhb_loop+0x35/0x90 [ 99.091221][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.097126][ T6875] RIP: 0033:0x7f12a0d7d15c [ 99.101554][ T6875] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 99.121201][ T6875] RSP: 002b:00007f12a1ad4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.129665][ T6875] RAX: ffffffffffffffda RBX: 00007f12a0f35f80 RCX: 00007f12a0d7d15c [ 99.137662][ T6875] RDX: 000000000000000f RSI: 00007f12a1ad40a0 RDI: 0000000000000004 [ 99.145702][ T6875] RBP: 00007f12a1ad4090 R08: 0000000000000000 R09: 0000000000000000 [ 99.153684][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.161671][ T6875] R13: 0000000000000000 R14: 00007f12a0f35f80 R15: 00007fff7e7e34a8 [ 99.169665][ T6875] [ 99.189506][ T6873] netlink: 3536 bytes leftover after parsing attributes in process `syz.2.272'. [ 99.209277][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 99.236716][ T6871] netlink: 120 bytes leftover after parsing attributes in process `syz.4.273'. [ 99.450146][ T6880] bridge_slave_0: left allmulticast mode [ 99.497982][ T6880] bridge_slave_0: left promiscuous mode [ 99.503883][ T6880] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.525503][ T6880] bridge_slave_1: left allmulticast mode [ 99.546106][ T6880] bridge_slave_1: left promiscuous mode [ 99.564295][ T6880] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.667374][ T6880] bond0: (slave bond_slave_0): Releasing backup interface [ 99.725858][ T6880] bond0: (slave bond_slave_1): Releasing backup interface [ 99.854318][ T6880] team0: Port device team_slave_0 removed [ 100.108764][ T6880] team0: Port device team_slave_1 removed [ 100.123881][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.144233][ T6880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.163465][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.195785][ T6880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.295640][ T6890] team0: Port device wg2 added [ 100.338120][ T6893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.275'. [ 100.764918][ T6920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.905661][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 100.925548][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 100.948051][ T6926] tipc: Enabling of bearer rejected, failed to enable media [ 101.134655][ T6933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.290'. [ 101.535027][ T6949] netlink: 'syz.4.297': attribute type 10 has an invalid length. [ 101.576639][ T6950] netlink: 'syz.2.296': attribute type 1 has an invalid length. [ 101.591157][ T6949] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.656887][ T6956] Cannot find add_set index 1 as target [ 104.093384][ T6954] hsr_slave_0: left promiscuous mode [ 104.100848][ T6954] hsr_slave_1: left promiscuous mode [ 104.116380][ T6956] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 104.352830][ T6972] macsec0: entered promiscuous mode [ 104.521357][ T6974] veth1_macvtap: left promiscuous mode [ 104.550630][ T6974] macsec0 (unregistering): left promiscuous mode [ 104.642269][ T6994] __nla_validate_parse: 3 callbacks suppressed [ 104.642289][ T6994] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.307'. [ 104.858319][ T7006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.890807][ T7006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.912925][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.313'. [ 104.926827][ T7002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.315'. [ 104.952990][ T6980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.130951][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 105.141734][ T7020] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 105.324694][ T7032] team0: Device macvlan1 is of different type [ 105.553334][ T7043] tun0: tun_chr_ioctl cmd 2147767519 [ 106.336162][ T7090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.338'. [ 106.613328][ T7108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.703071][ T7108] batadv_slave_0: entered promiscuous mode [ 106.971326][ T7125] dccp_invalid_packet: P.Data Offset(4) too small [ 107.151855][ T7133] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 107.286797][ T7137] netlink: 'syz.0.357': attribute type 1 has an invalid length. [ 107.339194][ T7144] batadv_slave_1: entered promiscuous mode [ 107.404284][ T7144] batadv_slave_1: left promiscuous mode [ 107.554423][ T7159] Bluetooth: MGMT ver 1.23 [ 107.566778][ T7161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.366'. [ 107.587441][ T7161] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.600829][ T7161] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.611289][ T7161] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.623115][ T7161] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.637585][ T7163] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 107.876936][ T7178] Cannot find set identified by id 0 to match [ 107.887585][ T7179] netlink: 32 bytes leftover after parsing attributes in process `syz.4.371'. [ 107.898206][ T7179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.371'. [ 107.960385][ T7181] dvmrp5: entered allmulticast mode [ 107.967874][ T7182] dvmrp5: left allmulticast mode [ 108.285968][ T7202] syzkaller0: create flow: hash 2256074976 index 2 [ 108.316526][ T52] syzkaller0: tun_net_xmit 76 [ 108.334244][ T52] syzkaller0: tun_net_xmit 48 [ 108.339565][ T25] syzkaller0: tun_net_xmit 76 [ 108.447090][ T7193] syzkaller0: delete flow: hash 2256074976 index 2 [ 108.455051][ T25] syzkaller0: tun_net_xmit 76 [ 108.463979][ T7204] vxcan1: entered allmulticast mode [ 108.472187][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 108.488288][ T25] syzkaller0: tun_net_xmit 76 [ 110.036951][ T7215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.053408][ T7215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.064622][ T7215] bond0 (unregistering): Released all slaves [ 110.092864][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'. [ 110.278253][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 110.302190][ T1144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.302744][ T7234] Unsupported ieee802154 address type: 0 [ 110.566742][ T1144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.594577][ T7252] x_tables: duplicate underflow at hook 1 [ 110.648775][ T7242] netlink: 'syz.4.394': attribute type 10 has an invalid length. [ 110.678013][ T7242] netlink: 40 bytes leftover after parsing attributes in process `syz.4.394'. [ 110.722503][ T7242] bridge0: port 3(macvlan1) entered blocking state [ 110.740317][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.750599][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.763943][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.768619][ T7242] bridge0: port 3(macvlan1) entered disabled state [ 110.792579][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.800274][ T7242] macvlan1: entered allmulticast mode [ 110.806318][ T7242] veth1_vlan: entered allmulticast mode [ 110.812104][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 110.820264][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.829848][ T7242] macvlan1: entered promiscuous mode [ 110.836197][ T7242] bridge0: port 3(macvlan1) entered blocking state [ 110.842908][ T7242] bridge0: port 3(macvlan1) entered forwarding state [ 110.957176][ T1144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.105505][ T1144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.550450][ T1144] bridge_slave_1: left allmulticast mode [ 111.556483][ T1144] bridge_slave_1: left promiscuous mode [ 111.579339][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.617438][ T1144] bridge_slave_0: left allmulticast mode [ 111.623987][ T1144] bridge_slave_0: left promiscuous mode [ 111.631286][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.701258][ T7305] netlink: 96 bytes leftover after parsing attributes in process `syz.4.402'. [ 111.835647][ T7309] No such timeout policy "syz0" [ 112.066190][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.080155][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.091670][ T1144] bond0 (unregistering): (slave team0): Releasing backup interface [ 112.103327][ T1144] bond0 (unregistering): Released all slaves [ 112.116243][ T1144] bond1 (unregistering): Released all slaves [ 112.155614][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 112.455829][ T7312] team0 (unregistering): Port device wg2 removed [ 112.483777][ T7265] chnl_net:caif_netlink_parms(): no params data found [ 112.495276][ T7319] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 112.646834][ T7332] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 112.862854][ T7265] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.894132][ T7265] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.902778][ T7265] bridge_slave_0: entered allmulticast mode [ 112.935855][ T7265] bridge_slave_0: entered promiscuous mode [ 112.938395][ T5849] Bluetooth: hci2: command tx timeout [ 113.004602][ T1144] hsr_slave_0: left promiscuous mode [ 113.017364][ T1144] hsr_slave_1: left promiscuous mode [ 113.024872][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.038708][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.046694][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.056852][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.076185][ T1144] veth1_macvtap: left promiscuous mode [ 113.083498][ T1144] veth0_macvtap: left promiscuous mode [ 113.089660][ T1144] veth1_vlan: left promiscuous mode [ 113.096091][ T1144] veth0_vlan: left promiscuous mode [ 113.553997][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 113.593744][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 113.975376][ T7265] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.982755][ T7265] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.992412][ T7265] bridge_slave_1: entered allmulticast mode [ 114.001477][ T7265] bridge_slave_1: entered promiscuous mode [ 114.050780][ T7362] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 114.080693][ T7365] netlink: 'syz.1.417': attribute type 11 has an invalid length. [ 114.099263][ T7265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.114134][ T7265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.202806][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 114.223460][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 114.282268][ T7265] team0: Port device team_slave_0 added [ 114.291252][ T7265] team0: Port device team_slave_1 added [ 114.314295][ T7379] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 114.363613][ T7265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.388152][ T7265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.425696][ T7265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.447610][ T7265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.484562][ T7265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.556830][ T7396] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.429'. [ 114.557073][ T7265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.801686][ T7265] hsr_slave_0: entered promiscuous mode [ 114.848334][ T7265] hsr_slave_1: entered promiscuous mode [ 114.863512][ T7265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.886495][ T7265] Cannot create hsr debugfs directory [ 114.989691][ T7414] veth0_vlan: left promiscuous mode [ 115.020898][ T5849] Bluetooth: hci2: command tx timeout [ 115.072209][ T7413] delete_channel: no stack [ 115.217318][ T7428] netlink: 68 bytes leftover after parsing attributes in process `syz.0.441'. [ 115.235984][ T7429] netlink: 68 bytes leftover after parsing attributes in process `syz.0.441'. [ 115.540845][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'. [ 115.685512][ T7458] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 115.697802][ T7458] Cannot find add_set index 0 as target [ 115.705719][ T7466] netlink: 'syz.4.455': attribute type 3 has an invalid length. [ 115.883820][ T7478] sctp: [Deprecated]: syz.1.458 (pid 7478) Use of int in maxseg socket option. [ 115.883820][ T7478] Use struct sctp_assoc_value instead [ 115.914343][ T7265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.932945][ T7265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.982642][ T7265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.997045][ T7265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 116.016448][ T7485] sctp: [Deprecated]: syz.0.459 (pid 7485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.016448][ T7485] Use struct sctp_sack_info instead [ 116.154304][ T7265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.200807][ T7265] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.233036][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.240264][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.300401][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.307569][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.328569][ T968] IPVS: starting estimator thread 0... [ 116.343545][ T7488] batadv_slave_0: entered promiscuous mode [ 116.418798][ T7495] IPVS: using max 20 ests per chain, 48000 per kthread [ 116.457130][ T7265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.608491][ T7505] trusted_key: syz.1.466 sent an empty control message without MSG_MORE. [ 116.754685][ T7265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.793635][ T7513] netlink: 808 bytes leftover after parsing attributes in process `syz.3.468'. [ 116.864848][ T7265] veth0_vlan: entered promiscuous mode [ 116.895464][ T7265] veth1_vlan: entered promiscuous mode [ 116.930486][ T7518] netlink: 48 bytes leftover after parsing attributes in process `syz.3.468'. [ 116.952779][ T7265] veth0_macvtap: entered promiscuous mode [ 116.979058][ T7518] netlink: 48 bytes leftover after parsing attributes in process `syz.3.468'. [ 116.992181][ T7265] veth1_macvtap: entered promiscuous mode [ 117.042118][ T7265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.063798][ T7265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.088729][ T5849] Bluetooth: hci2: command tx timeout [ 117.106031][ T7265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.144678][ T7521] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.471'. [ 117.179653][ T7265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.195691][ T7265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.233626][ T7265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.254072][ T7265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.275725][ T7265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.303656][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 117.320956][ T7528] syz_tun: entered promiscuous mode [ 117.327080][ T7528] macsec1: entered promiscuous mode [ 117.355542][ T7528] syz_tun: left promiscuous mode [ 117.398804][ T7265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.417276][ T7265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.427077][ T7265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.437642][ T7265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.541905][ T7542] xt_TCPMSS: Only works on TCP SYN packets [ 117.614653][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.635262][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.684207][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.703060][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.872061][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 118.072322][ T7573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.488'. [ 118.092894][ T7573] syz_tun: entered promiscuous mode [ 118.103382][ T7573] syz_tun: left promiscuous mode [ 118.336048][ T7582] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.504226][ T7602] netlink: 'syz.1.495': attribute type 8 has an invalid length. [ 118.848835][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.857540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.263031][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.761797][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.776306][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.784797][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.817640][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.826357][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 119.834714][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.889693][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.899491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.133959][ T7669] chnl_net:caif_netlink_parms(): no params data found [ 120.212098][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.326646][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.538097][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.646460][ T7669] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.677292][ T7669] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.703925][ T7669] bridge_slave_0: entered allmulticast mode [ 120.729047][ T7669] bridge_slave_0: entered promiscuous mode [ 120.750123][ T7701] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 120.782645][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.798978][ T7669] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.819483][ T7669] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.858067][ T7669] bridge_slave_1: entered allmulticast mode [ 120.874563][ T7669] bridge_slave_1: entered promiscuous mode [ 120.930709][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.939165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.035423][ T7724] vlan2: entered promiscuous mode [ 121.044251][ T7724] dummy0: entered promiscuous mode [ 121.068947][ T7724] dummy0: left promiscuous mode [ 121.124010][ T7727] __nla_validate_parse: 6 callbacks suppressed [ 121.124031][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 121.181137][ T7669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.217148][ T7669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.252980][ T11] bridge_slave_1: left allmulticast mode [ 121.258942][ T11] bridge_slave_1: left promiscuous mode [ 121.264729][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.285081][ T11] bridge_slave_0: left allmulticast mode [ 121.290942][ T11] bridge_slave_0: left promiscuous mode [ 121.294965][ T7734] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 121.296728][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.416140][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 121.508291][ T7740] FAULT_INJECTION: forcing a failure. [ 121.508291][ T7740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.523725][ T7740] CPU: 1 UID: 0 PID: 7740 Comm: syz.4.538 Not tainted 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 121.534349][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.544418][ T7740] Call Trace: [ 121.547711][ T7740] [ 121.550643][ T7740] dump_stack_lvl+0x241/0x360 [ 121.555337][ T7740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.560556][ T7740] ? __pfx__printk+0x10/0x10 [ 121.565178][ T7740] ? __pfx_lock_release+0x10/0x10 [ 121.570229][ T7740] should_fail_ex+0x3b0/0x4e0 [ 121.575032][ T7740] _copy_from_user+0x2f/0xc0 [ 121.579717][ T7740] copy_msghdr_from_user+0xae/0x680 [ 121.584945][ T7740] ? __lock_acquire+0x1384/0x2050 [ 121.589996][ T7740] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 121.595825][ T7740] do_recvmmsg+0x3f9/0xad0 [ 121.600259][ T7740] ? __pfx_do_recvmmsg+0x10/0x10 [ 121.605249][ T7740] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 121.611163][ T7740] ? ksys_write+0x229/0x2b0 [ 121.615703][ T7740] ? __pfx_lock_release+0x10/0x10 [ 121.620751][ T7740] ? vfs_write+0x730/0xd30 [ 121.625181][ T7740] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 121.631171][ T7740] __x64_sys_recvmmsg+0x199/0x250 [ 121.636205][ T7740] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 121.641774][ T7740] ? do_syscall_64+0x100/0x230 [ 121.646558][ T7740] ? do_syscall_64+0xb6/0x230 [ 121.651242][ T7740] do_syscall_64+0xf3/0x230 [ 121.655748][ T7740] ? clear_bhb_loop+0x35/0x90 [ 121.660430][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.666332][ T7740] RIP: 0033:0x7fbd1fd7e719 [ 121.670748][ T7740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.690375][ T7740] RSP: 002b:00007fbd1f7ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 121.698812][ T7740] RAX: ffffffffffffffda RBX: 00007fbd1ff35f80 RCX: 00007fbd1fd7e719 [ 121.706779][ T7740] RDX: 0000000000000001 RSI: 0000000020007300 RDI: 0000000000000004 [ 121.714750][ T7740] RBP: 00007fbd1f7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 121.722744][ T7740] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 121.730712][ T7740] R13: 0000000000000000 R14: 00007fbd1ff35f80 R15: 00007ffd1f13f938 [ 121.738693][ T7740] [ 121.889333][ T5847] Bluetooth: hci2: command tx timeout [ 121.973762][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.982169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.059879][ T7752] tipc: Can't bind to reserved service type 1 [ 122.102922][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.114879][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.126484][ T11] bond0 (unregistering): Released all slaves [ 122.155125][ T7734] netlink: 144 bytes leftover after parsing attributes in process `syz.3.535'. [ 122.219250][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 122.226886][ T7749] gre1: entered promiscuous mode [ 122.234618][ T7749] gre1: entered allmulticast mode [ 122.441409][ T7669] team0: Port device team_slave_0 added [ 122.466743][ T7669] team0: Port device team_slave_1 added [ 122.484160][ T7762] tipc: Enabling of bearer rejected, failed to enable media [ 122.496629][ T7765] netlink: 20 bytes leftover after parsing attributes in process `syz.0.545'. [ 122.632684][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.647168][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.747243][ T7669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.801955][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.844512][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.884909][ T7669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.928123][ T11] hsr_slave_0: left promiscuous mode [ 122.936234][ T11] hsr_slave_1: left promiscuous mode [ 122.949362][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.966709][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.993460][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.008557][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.009629][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.071139][ T11] veth1_macvtap: left promiscuous mode [ 123.098052][ T11] veth0_macvtap: left promiscuous mode [ 123.103715][ T11] veth1_vlan: left promiscuous mode [ 123.125370][ T11] veth0_vlan: left promiscuous mode [ 123.171535][ T7806] IPVS: length: 24 != 4067709560 [ 123.563854][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'. [ 123.821315][ T11] team0 (unregistering): Port device team_slave_1 removed [ 123.864575][ T11] team0 (unregistering): Port device team_slave_0 removed [ 123.972275][ T5847] Bluetooth: hci2: command tx timeout [ 124.305035][ T7817] dvmrp5: entered allmulticast mode [ 124.315493][ T7823] netlink: 72 bytes leftover after parsing attributes in process `syz.0.555'. [ 124.324780][ T7823] netlink: 72 bytes leftover after parsing attributes in process `syz.0.555'. [ 124.345719][ T7823] netlink: 65 bytes leftover after parsing attributes in process `syz.0.555'. [ 124.424335][ T7669] hsr_slave_0: entered promiscuous mode [ 124.459796][ T7669] hsr_slave_1: entered promiscuous mode [ 124.472709][ T7669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.485740][ T7669] Cannot create hsr debugfs directory [ 124.518590][ T7830] netlink: 112 bytes leftover after parsing attributes in process `syz.1.557'. [ 124.596383][ T7835] netlink: 36 bytes leftover after parsing attributes in process `syz.0.560'. [ 124.656815][ T7839] bond1: entered promiscuous mode [ 124.683198][ T7839] bond1: entered allmulticast mode [ 124.697894][ T7839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.940859][ T7839] bond1 (unregistering): Released all slaves [ 124.971584][ T7851] net_ratelimit: 25 callbacks suppressed [ 124.971604][ T7851] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 125.046063][ T7857] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 125.100446][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.108793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.706908][ T7669] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 125.726997][ T7669] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.749943][ T7669] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 125.771447][ T7669] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 125.911287][ T7669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.964984][ T7669] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.981575][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.988793][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.012541][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.019723][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.049265][ T5847] Bluetooth: hci2: command tx timeout [ 126.082511][ T7669] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.117203][ T7669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.218467][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.226876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.336638][ T7669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.421014][ T7669] veth0_vlan: entered promiscuous mode [ 126.456672][ T7669] veth1_vlan: entered promiscuous mode [ 126.520896][ T7669] veth0_macvtap: entered promiscuous mode [ 126.532232][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.539453][ T7669] veth1_macvtap: entered promiscuous mode [ 126.615023][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.632166][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.643488][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.655243][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.665808][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.675694][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.686230][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.700904][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.711451][ T7669] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.720276][ T7669] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.729299][ T7669] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.738157][ T7669] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.775312][ T7942] __nla_validate_parse: 6 callbacks suppressed [ 126.775330][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.595'. [ 126.916067][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.937938][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.948348][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'. [ 127.035154][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.053839][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.220161][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.248351][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.256687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.400869][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.423134][ T7967] netlink: 'syz.0.602': attribute type 1 has an invalid length. [ 127.458130][ T7967] netlink: 'syz.0.602': attribute type 4 has an invalid length. [ 127.472279][ T7967] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.602'. [ 127.475479][ T7972] xt_hashlimit: overflow, rate too high: 0 [ 127.529040][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.654079][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.676098][ T7977] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.682870][ T7977] syzkaller0: linktype set to 512 [ 127.685928][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.698329][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.706412][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.714468][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.724718][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 127.734154][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.880465][ T7990] netlink: 116 bytes leftover after parsing attributes in process `syz.0.608'. [ 128.289714][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.461119][ T35] bond0 (unregistering): Released all slaves [ 128.706423][ T7980] chnl_net:caif_netlink_parms(): no params data found [ 128.776829][ T8015] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.791902][ T8015] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.803466][ T8015] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.812601][ T8015] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 129.217605][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.239611][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.258989][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.271491][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.281437][ T35] veth1_macvtap: left promiscuous mode [ 129.287001][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 129.294917][ T35] veth0_macvtap: left promiscuous mode [ 129.295244][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.300579][ T35] veth1_vlan: left promiscuous mode [ 129.315179][ T35] veth0_vlan: left promiscuous mode [ 129.811383][ T5849] Bluetooth: hci1: command tx timeout [ 129.983981][ T7980] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.991529][ T7980] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.998901][ T7980] bridge_slave_0: entered allmulticast mode [ 130.005634][ T7980] bridge_slave_0: entered promiscuous mode [ 130.013509][ T7980] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.021461][ T7980] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.028862][ T7980] bridge_slave_1: entered allmulticast mode [ 130.035963][ T7980] bridge_slave_1: entered promiscuous mode [ 130.165862][ T1077] net_ratelimit: 10 callbacks suppressed [ 130.165881][ T1077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.216513][ T7980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.253038][ T7980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.278077][ T8055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.625'. [ 130.368748][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.377063][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.426601][ T7980] team0: Port device team_slave_0 added [ 130.517389][ T7980] team0: Port device team_slave_1 added [ 130.625714][ T8064] mac80211_hwsim hwsim5 ˆªŒDáT: renamed from wlan1 (while UP) [ 130.655073][ T7980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.668570][ T7980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.696280][ T7980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.727369][ T7980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.742172][ T7980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.792909][ T7980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.815474][ T8040] chnl_net:caif_netlink_parms(): no params data found [ 130.925983][ T8082] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 130.961809][ T8082] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 131.046951][ T8095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.056186][ T8095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.065259][ T8095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.074599][ T8095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.077350][ T7980] hsr_slave_0: entered promiscuous mode [ 131.086823][ T8095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.109799][ T7980] hsr_slave_1: entered promiscuous mode [ 131.115887][ T7980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.124197][ T7980] Cannot create hsr debugfs directory [ 131.151208][ T8099] netlink: 'syz.4.638': attribute type 10 has an invalid length. [ 131.193501][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.211476][ T8095] netlink: 'syz.0.637': attribute type 13 has an invalid length. [ 131.223835][ T8094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.323381][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.353701][ T8040] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.362436][ T8040] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.372939][ T8040] bridge_slave_0: entered allmulticast mode [ 131.380001][ T8040] bridge_slave_0: entered promiscuous mode [ 131.387626][ T8040] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.401582][ T8040] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.412934][ T8040] bridge_slave_1: entered allmulticast mode [ 131.418109][ T5849] Bluetooth: hci2: command tx timeout [ 131.425653][ T8040] bridge_slave_1: entered promiscuous mode [ 131.469531][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.580424][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.611284][ T8040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.645265][ T8040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.721899][ T8040] team0: Port device team_slave_0 added [ 131.735205][ T8040] team0: Port device team_slave_1 added [ 131.859924][ T8040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.866894][ T8040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.894662][ T5849] Bluetooth: hci1: command tx timeout [ 131.903852][ T8040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.956251][ T35] bridge_slave_1: left allmulticast mode [ 131.967771][ T35] bridge_slave_1: left promiscuous mode [ 131.976075][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.001837][ T35] bridge_slave_0: left allmulticast mode [ 132.008441][ T35] bridge_slave_0: left promiscuous mode [ 132.014285][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.129690][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 132.147130][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 132.609248][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.632228][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.647420][ T35] bond0 (unregistering): Released all slaves [ 132.670012][ T8040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.677026][ T8040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.705187][ T8040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.789620][ T8107] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 133.091308][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.232864][ T8157] netlink: 68 bytes leftover after parsing attributes in process `syz.3.654'. [ 133.234669][ T8040] hsr_slave_0: entered promiscuous mode [ 133.265335][ T8040] hsr_slave_1: entered promiscuous mode [ 133.275862][ T8040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.289204][ T8040] Cannot create hsr debugfs directory [ 133.298935][ T8137] netlink: 'syz.4.648': attribute type 11 has an invalid length. [ 133.355688][ T35] hsr_slave_0: left promiscuous mode [ 133.364824][ T35] hsr_slave_1: left promiscuous mode [ 133.371203][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.379074][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.389136][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.396692][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.408961][ T5849] Bluetooth: hci0: command 0x0c20 tx timeout [ 133.436487][ T35] veth1_macvtap: left promiscuous mode [ 133.442181][ T35] veth0_macvtap: left promiscuous mode [ 133.448473][ T35] veth1_vlan: left promiscuous mode [ 133.453889][ T35] veth0_vlan: left promiscuous mode [ 133.488407][ T5849] Bluetooth: hci2: command tx timeout [ 133.973381][ T5849] Bluetooth: hci1: command tx timeout [ 133.991432][ T35] team0 (unregistering): Port device team_slave_1 removed [ 134.047941][ T35] team0 (unregistering): Port device team_slave_0 removed [ 134.785321][ T7980] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 134.824958][ T8193] vlan2: entered allmulticast mode [ 134.865294][ T7980] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 134.874287][ T8199] netlink: 'syz.0.666': attribute type 1 has an invalid length. [ 134.892382][ T8199] netlink: 'syz.0.666': attribute type 4 has an invalid length. [ 134.900628][ T8199] netlink: 13214 bytes leftover after parsing attributes in process `syz.0.666'. [ 134.909969][ T8199] [ 134.912329][ T8199] ============================= [ 134.917186][ T8199] WARNING: suspicious RCU usage [ 134.922275][ T8199] 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 Not tainted [ 134.929540][ T8199] ----------------------------- [ 134.934405][ T8199] kernel/rcu/tree.c:4092 Illegal synchronize_rcu() in RCU read-side critical section! [ 134.944058][ T8199] [ 134.944058][ T8199] other info that might help us debug this: [ 134.944058][ T8199] [ 134.954451][ T8199] [ 134.954451][ T8199] rcu_scheduler_active = 2, debug_locks = 1 [ 134.962679][ T8199] 1 lock held by syz.0.666/8199: [ 134.967846][ T8199] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: route_doit+0x3d6/0x640 [ 134.976973][ T8199] [ 134.976973][ T8199] stack backtrace: [ 134.983038][ T8199] CPU: 0 UID: 0 PID: 8199 Comm: syz.0.666 Not tainted 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 134.993661][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 134.995763][ T8205] netlink: 'syz.3.668': attribute type 3 has an invalid length. [ 135.003719][ T8199] Call Trace: [ 135.003731][ T8199] [ 135.003741][ T8199] dump_stack_lvl+0x241/0x360 [ 135.003779][ T8199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.027514][ T8199] ? __pfx__printk+0x10/0x10 [ 135.032164][ T8199] lockdep_rcu_suspicious+0x226/0x340 [ 135.037653][ T8199] synchronize_rcu+0xea/0x360 [ 135.042362][ T8199] ? __pfx_synchronize_rcu+0x10/0x10 [ 135.047665][ T8199] ? do_raw_spin_unlock+0x13c/0x8b0 [ 135.052877][ T8199] phonet_route_del+0xc6/0x140 [ 135.057640][ T8199] route_doit+0x514/0x640 [ 135.061975][ T8199] ? __pfx_route_doit+0x10/0x10 [ 135.066845][ T8199] ? __pfx_route_doit+0x10/0x10 [ 135.071695][ T8199] rtnetlink_rcv_msg+0x791/0xcf0 [ 135.076637][ T8199] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 135.081752][ T8199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.087218][ T8199] ? ref_tracker_free+0x643/0x7e0 [ 135.092246][ T8199] netlink_rcv_skb+0x1e3/0x430 [ 135.097015][ T8199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.102483][ T8199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.107786][ T8199] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.112982][ T8199] netlink_unicast+0x7f6/0x990 [ 135.117749][ T8199] ? __pfx_netlink_unicast+0x10/0x10 [ 135.123029][ T8199] ? __virt_addr_valid+0x183/0x530 [ 135.128137][ T8199] ? __check_object_size+0x48e/0x900 [ 135.133419][ T8199] netlink_sendmsg+0x8e4/0xcb0 [ 135.138192][ T8199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.143476][ T8199] ? __pfx_aa_file_perm+0x10/0x10 [ 135.148497][ T8199] ? aa_sock_msg_perm+0x91/0x160 [ 135.153440][ T8199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.158728][ T8199] __sock_sendmsg+0x221/0x270 [ 135.163406][ T8199] sock_write_iter+0x2d7/0x3f0 [ 135.168165][ T8199] ? __pfx_sock_write_iter+0x10/0x10 [ 135.173629][ T8199] ? bpf_lsm_file_permission+0x9/0x10 [ 135.178993][ T8199] ? security_file_permission+0x74/0x280 [ 135.184631][ T8199] vfs_write+0xaeb/0xd30 [ 135.188887][ T8199] ? __pfx_sock_write_iter+0x10/0x10 [ 135.194170][ T8199] ? __pfx_vfs_write+0x10/0x10 [ 135.198954][ T8199] ? fdget_pos+0x19a/0x320 [ 135.203465][ T8199] ksys_write+0x183/0x2b0 [ 135.207792][ T8199] ? __pfx_ksys_write+0x10/0x10 [ 135.212639][ T8199] ? do_syscall_64+0x100/0x230 [ 135.217486][ T8199] ? do_syscall_64+0xb6/0x230 [ 135.222157][ T8199] do_syscall_64+0xf3/0x230 [ 135.226652][ T8199] ? clear_bhb_loop+0x35/0x90 [ 135.231322][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.237215][ T8199] RIP: 0033:0x7fa0f297e719 [ 135.241628][ T8199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.261228][ T8199] RSP: 002b:00007fa0f3819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.269639][ T8199] RAX: ffffffffffffffda RBX: 00007fa0f2b36058 RCX: 00007fa0f297e719 [ 135.277620][ T8199] RDX: 000000000000fe33 RSI: 0000000020000000 RDI: 0000000000000005 [ 135.285932][ T8199] RBP: 00007fa0f29f132e R08: 0000000000000000 R09: 0000000000000000 [ 135.293895][ T8199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.301860][ T8199] R13: 0000000000000000 R14: 00007fa0f2b36058 R15: 00007ffd448e7c98 [ 135.309937][ T8199] [ 135.317792][ T8199] BUG: sleeping function called from invalid context at kernel/rcu/tree.c:4003 [ 135.327680][ T8199] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 8199, name: syz.0.666 [ 135.338471][ T8199] preempt_count: 0, expected: 0 [ 135.343550][ T8199] RCU nest depth: 1, expected: 0 [ 135.348814][ T8199] 1 lock held by syz.0.666/8199: [ 135.353930][ T8199] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: route_doit+0x3d6/0x640 [ 135.363440][ T8199] CPU: 1 UID: 0 PID: 8199 Comm: syz.0.666 Not tainted 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 135.374132][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 135.384298][ T8199] Call Trace: [ 135.387592][ T8199] [ 135.390530][ T8199] dump_stack_lvl+0x241/0x360 [ 135.395239][ T8199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.400476][ T8199] ? __pfx__printk+0x10/0x10 [ 135.405099][ T8199] __might_resched+0x5d4/0x780 [ 135.409893][ T8199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.415293][ T8199] ? preempt_schedule_notrace+0xf6/0x140 [ 135.420964][ T8199] ? __pfx___might_resched+0x10/0x10 [ 135.426282][ T8199] ? nbcon_cpu_emergency_exit+0x6e/0xd0 [ 135.431832][ T8199] ? nbcon_cpu_emergency_exit+0x77/0xd0 [ 135.437395][ T8199] ? lockdep_rcu_suspicious+0x299/0x340 [ 135.442943][ T8199] synchronize_rcu+0x104/0x360 [ 135.447714][ T8199] ? __pfx_synchronize_rcu+0x10/0x10 [ 135.453017][ T8199] ? do_raw_spin_unlock+0x13c/0x8b0 [ 135.458224][ T8199] phonet_route_del+0xc6/0x140 [ 135.462992][ T8199] route_doit+0x514/0x640 [ 135.467322][ T8199] ? __pfx_route_doit+0x10/0x10 [ 135.472197][ T8199] ? __pfx_route_doit+0x10/0x10 [ 135.477056][ T8199] rtnetlink_rcv_msg+0x791/0xcf0 [ 135.481994][ T8199] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 135.487107][ T8199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.492574][ T8199] ? ref_tracker_free+0x643/0x7e0 [ 135.497632][ T8199] netlink_rcv_skb+0x1e3/0x430 [ 135.503031][ T8199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.508513][ T8199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.513823][ T8199] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.519027][ T8199] netlink_unicast+0x7f6/0x990 [ 135.523800][ T8199] ? __pfx_netlink_unicast+0x10/0x10 [ 135.529098][ T8199] ? __virt_addr_valid+0x183/0x530 [ 135.534228][ T8199] ? __check_object_size+0x48e/0x900 [ 135.539535][ T8199] netlink_sendmsg+0x8e4/0xcb0 [ 135.544318][ T8199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.549605][ T8199] ? __pfx_aa_file_perm+0x10/0x10 [ 135.554632][ T8199] ? aa_sock_msg_perm+0x91/0x160 [ 135.559576][ T8199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.564864][ T8199] __sock_sendmsg+0x221/0x270 [ 135.569543][ T8199] sock_write_iter+0x2d7/0x3f0 [ 135.574305][ T8199] ? __pfx_sock_write_iter+0x10/0x10 [ 135.579596][ T8199] ? bpf_lsm_file_permission+0x9/0x10 [ 135.584961][ T8199] ? security_file_permission+0x74/0x280 [ 135.590605][ T8199] vfs_write+0xaeb/0xd30 [ 135.594853][ T8199] ? __pfx_sock_write_iter+0x10/0x10 [ 135.600158][ T8199] ? __pfx_vfs_write+0x10/0x10 [ 135.604952][ T8199] ? fdget_pos+0x19a/0x320 [ 135.609375][ T8199] ksys_write+0x183/0x2b0 [ 135.613731][ T8199] ? __pfx_ksys_write+0x10/0x10 [ 135.618604][ T8199] ? do_syscall_64+0x100/0x230 [ 135.623412][ T8199] ? do_syscall_64+0xb6/0x230 [ 135.628093][ T8199] do_syscall_64+0xf3/0x230 [ 135.632597][ T8199] ? clear_bhb_loop+0x35/0x90 [ 135.637270][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.643171][ T8199] RIP: 0033:0x7fa0f297e719 [ 135.647598][ T8199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.667306][ T8199] RSP: 002b:00007fa0f3819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.675725][ T8199] RAX: ffffffffffffffda RBX: 00007fa0f2b36058 RCX: 00007fa0f297e719 [ 135.683706][ T8199] RDX: 000000000000fe33 RSI: 0000000020000000 RDI: 0000000000000005 [ 135.691674][ T8199] RBP: 00007fa0f29f132e R08: 0000000000000000 R09: 0000000000000000 [ 135.699646][ T8199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.707613][ T8199] R13: 0000000000000000 R14: 00007fa0f2b36058 R15: 00007ffd448e7c98 [ 135.715594][ T8199] [ 135.724019][ T5849] Bluetooth: hci2: command tx timeout [ 135.729703][ T2141] net_ratelimit: 16 callbacks suppressed [ 135.729720][ T2141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.740759][ T8199] [ 135.743748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.745756][ T8199] ============================= [ 135.745766][ T8199] WARNING: suspicious RCU usage [ 135.763865][ T8199] 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 Tainted: G W [ 135.772573][ T8199] ----------------------------- [ 135.777453][ T8199] kernel/rcu/tree_exp.h:949 Illegal synchronize_rcu_expedited() in RCU read-side critical section! [ 135.788207][ T8199] [ 135.788207][ T8199] other info that might help us debug this: [ 135.788207][ T8199] [ 135.798571][ T8199] [ 135.798571][ T8199] rcu_scheduler_active = 2, debug_locks = 1 [ 135.806661][ T8199] 1 lock held by syz.0.666/8199: [ 135.811774][ T8199] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: route_doit+0x3d6/0x640 [ 135.820948][ T8199] [ 135.820948][ T8199] stack backtrace: [ 135.826859][ T8199] CPU: 0 UID: 0 PID: 8199 Comm: syz.0.666 Tainted: G W 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 135.838943][ T8199] Tainted: [W]=WARN [ 135.842750][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 135.852823][ T8199] Call Trace: [ 135.856132][ T8199] [ 135.859087][ T8199] dump_stack_lvl+0x241/0x360 [ 135.863793][ T8199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.868999][ T8199] ? __pfx__printk+0x10/0x10 [ 135.873597][ T8199] lockdep_rcu_suspicious+0x226/0x340 [ 135.878988][ T8199] synchronize_rcu_expedited+0x12e/0x830 [ 135.884628][ T8199] ? __pfx__printk+0x10/0x10 [ 135.889228][ T8199] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 135.895399][ T8199] ? add_taint+0x99/0xe0 [ 135.899646][ T8199] ? __might_resched+0x5e0/0x780 [ 135.904588][ T8199] ? __pfx___might_resched+0x10/0x10 [ 135.909879][ T8199] ? nbcon_cpu_emergency_exit+0x6e/0xd0 [ 135.915423][ T8199] ? nbcon_cpu_emergency_exit+0x77/0xd0 [ 135.921001][ T8199] ? lockdep_rcu_suspicious+0x299/0x340 [ 135.926552][ T8199] synchronize_rcu+0x11b/0x360 [ 135.931317][ T8199] ? __pfx_synchronize_rcu+0x10/0x10 [ 135.936606][ T8199] ? do_raw_spin_unlock+0x13c/0x8b0 [ 135.941811][ T8199] phonet_route_del+0xc6/0x140 [ 135.946581][ T8199] route_doit+0x514/0x640 [ 135.950914][ T8199] ? __pfx_route_doit+0x10/0x10 [ 135.955784][ T8199] ? __pfx_route_doit+0x10/0x10 [ 135.960636][ T8199] rtnetlink_rcv_msg+0x791/0xcf0 [ 135.965663][ T8199] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 135.970782][ T8199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.976244][ T8199] ? ref_tracker_free+0x643/0x7e0 [ 135.981271][ T8199] netlink_rcv_skb+0x1e3/0x430 [ 135.986038][ T8199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.991500][ T8199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.996798][ T8199] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.001997][ T8199] netlink_unicast+0x7f6/0x990 [ 136.006763][ T8199] ? __pfx_netlink_unicast+0x10/0x10 [ 136.012046][ T8199] ? __virt_addr_valid+0x183/0x530 [ 136.017161][ T8199] ? __check_object_size+0x48e/0x900 [ 136.022463][ T8199] netlink_sendmsg+0x8e4/0xcb0 [ 136.027238][ T8199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.032526][ T8199] ? __pfx_aa_file_perm+0x10/0x10 [ 136.037553][ T8199] ? aa_sock_msg_perm+0x91/0x160 [ 136.042491][ T8199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.047791][ T8199] __sock_sendmsg+0x221/0x270 [ 136.052488][ T8199] sock_write_iter+0x2d7/0x3f0 [ 136.057266][ T8199] ? __pfx_sock_write_iter+0x10/0x10 [ 136.062581][ T8199] ? bpf_lsm_file_permission+0x9/0x10 [ 136.067954][ T8199] ? security_file_permission+0x74/0x280 [ 136.073590][ T8199] vfs_write+0xaeb/0xd30 [ 136.077846][ T8199] ? __pfx_sock_write_iter+0x10/0x10 [ 136.083149][ T8199] ? __pfx_vfs_write+0x10/0x10 [ 136.087956][ T8199] ? fdget_pos+0x19a/0x320 [ 136.092384][ T8199] ksys_write+0x183/0x2b0 [ 136.096724][ T8199] ? __pfx_ksys_write+0x10/0x10 [ 136.101581][ T8199] ? do_syscall_64+0x100/0x230 [ 136.106345][ T8199] ? do_syscall_64+0xb6/0x230 [ 136.111022][ T8199] do_syscall_64+0xf3/0x230 [ 136.115521][ T8199] ? clear_bhb_loop+0x35/0x90 [ 136.120200][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.126097][ T8199] RIP: 0033:0x7fa0f297e719 [ 136.130519][ T8199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.150125][ T8199] RSP: 002b:00007fa0f3819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.158543][ T8199] RAX: ffffffffffffffda RBX: 00007fa0f2b36058 RCX: 00007fa0f297e719 [ 136.166510][ T8199] RDX: 000000000000fe33 RSI: 0000000020000000 RDI: 0000000000000005 [ 136.174477][ T8199] RBP: 00007fa0f29f132e R08: 0000000000000000 R09: 0000000000000000 [ 136.182447][ T8199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.190439][ T8199] R13: 0000000000000000 R14: 00007fa0f2b36058 R15: 00007ffd448e7c98 [ 136.198455][ T8199] [ 136.206226][ T5849] Bluetooth: hci1: command tx timeout [ 136.213040][ T8199] ------------[ cut here ]------------ [ 136.218531][ T8199] Voluntary context switch within RCU read-side critical section! [ 136.218617][ T8199] WARNING: CPU: 0 PID: 8199 at kernel/rcu/tree_plugin.h:331 rcu_note_context_switch+0xcf4/0xff0 [ 136.236861][ T8199] Modules linked in: [ 136.240786][ T8199] CPU: 0 UID: 0 PID: 8199 Comm: syz.0.666 Tainted: G W 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 136.252861][ T8199] Tainted: [W]=WARN [ 136.256667][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 136.266721][ T8199] RIP: 0010:rcu_note_context_switch+0xcf4/0xff0 [ 136.272982][ T8199] Code: 00 ba 02 00 00 00 e8 7b f8 fd ff 4c 8b b4 24 80 00 00 00 eb 91 c6 05 12 45 8b 0e 01 90 48 c7 c7 80 28 0c 8c e8 6d 29 da ff 90 <0f> 0b 90 90 e9 3b f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 00 f4 ff ff [ 136.292600][ T8199] RSP: 0018:ffffc9000338edc0 EFLAGS: 00010046 [ 136.298678][ T8199] RAX: 44f5f761c36e2800 RBX: ffff88807d2ade44 RCX: 0000000000040000 [ 136.306648][ T8199] RDX: ffffc9000be01000 RSI: 000000000003ffff RDI: 0000000000040000 [ 136.314631][ T8199] RBP: ffffc9000338ef10 R08: ffffffff8155d252 R09: fffffbfff1cf9fd0 [ 136.322615][ T8199] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff88807d2ada00 [ 136.330613][ T8199] R13: 0000000000000000 R14: 1ffff92000671dd0 R15: dffffc0000000000 [ 136.338651][ T8199] FS: 00007fa0f38196c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 136.347588][ T8199] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.354170][ T8199] CR2: 0000001b30a06ff8 CR3: 00000000292ac000 CR4: 00000000003526f0 [ 136.362143][ T8199] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 136.370115][ T8199] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 136.378084][ T8199] Call Trace: [ 136.381360][ T8199] [ 136.384289][ T8199] ? __warn+0x168/0x4e0 [ 136.388447][ T8199] ? rcu_note_context_switch+0xcf4/0xff0 [ 136.394106][ T8199] ? report_bug+0x2b3/0x500 [ 136.398615][ T8199] ? rcu_note_context_switch+0xcf4/0xff0 [ 136.404254][ T8199] ? handle_bug+0x60/0x90 [ 136.408581][ T8199] ? exc_invalid_op+0x1a/0x50 [ 136.413255][ T8199] ? asm_exc_invalid_op+0x1a/0x20 [ 136.418287][ T8199] ? __warn_printk+0x292/0x360 [ 136.423049][ T8199] ? rcu_note_context_switch+0xcf4/0xff0 [ 136.428707][ T8199] ? mark_lock+0x9a/0x360 [ 136.433065][ T8199] ? __lock_acquire+0x1384/0x2050 [ 136.438117][ T8199] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 136.444106][ T8199] ? mark_lock+0x9a/0x360 [ 136.448440][ T8199] ? rcu_is_watching+0x15/0xb0 [ 136.453201][ T8199] __schedule+0x348/0x4bd0 [ 136.457677][ T8199] ? __pfx___schedule+0x10/0x10 [ 136.462531][ T8199] ? schedule+0x90/0x320 [ 136.466774][ T8199] ? __pfx_lock_release+0x10/0x10 [ 136.471800][ T8199] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 136.477732][ T8199] ? schedule+0x90/0x320 [ 136.481991][ T8199] schedule+0x14b/0x320 [ 136.486355][ T8199] synchronize_rcu_expedited+0x70a/0x830 [ 136.492013][ T8199] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 136.498189][ T8199] ? __pfx_autoremove_wake_function+0x10/0x10 [ 136.504279][ T8199] ? add_taint+0x99/0xe0 [ 136.508543][ T8199] ? __might_resched+0x5e0/0x780 [ 136.513519][ T8199] ? __pfx___might_resched+0x10/0x10 [ 136.518824][ T8199] ? nbcon_cpu_emergency_exit+0x6e/0xd0 [ 136.524378][ T8199] ? nbcon_cpu_emergency_exit+0x77/0xd0 [ 136.529937][ T8199] ? lockdep_rcu_suspicious+0x299/0x340 [ 136.535502][ T8199] synchronize_rcu+0x11b/0x360 [ 136.540361][ T8199] ? __pfx_synchronize_rcu+0x10/0x10 [ 136.545649][ T8199] ? do_raw_spin_unlock+0x13c/0x8b0 [ 136.550852][ T8199] phonet_route_del+0xc6/0x140 [ 136.555617][ T8199] route_doit+0x514/0x640 [ 136.559951][ T8199] ? __pfx_route_doit+0x10/0x10 [ 136.564823][ T8199] ? __pfx_route_doit+0x10/0x10 [ 136.569766][ T8199] rtnetlink_rcv_msg+0x791/0xcf0 [ 136.574705][ T8199] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 136.579823][ T8199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.585291][ T8199] ? ref_tracker_free+0x643/0x7e0 [ 136.590315][ T8199] netlink_rcv_skb+0x1e3/0x430 [ 136.595076][ T8199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.600539][ T8199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.605857][ T8199] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.611070][ T8199] netlink_unicast+0x7f6/0x990 [ 136.615859][ T8199] ? __pfx_netlink_unicast+0x10/0x10 [ 136.621147][ T8199] ? __virt_addr_valid+0x183/0x530 [ 136.626266][ T8199] ? __check_object_size+0x48e/0x900 [ 136.631554][ T8199] netlink_sendmsg+0x8e4/0xcb0 [ 136.636327][ T8199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.641619][ T8199] ? __pfx_aa_file_perm+0x10/0x10 [ 136.646646][ T8199] ? aa_sock_msg_perm+0x91/0x160 [ 136.651584][ T8199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.656863][ T8199] __sock_sendmsg+0x221/0x270 [ 136.661542][ T8199] sock_write_iter+0x2d7/0x3f0 [ 136.666300][ T8199] ? __pfx_sock_write_iter+0x10/0x10 [ 136.671590][ T8199] ? bpf_lsm_file_permission+0x9/0x10 [ 136.676961][ T8199] ? security_file_permission+0x74/0x280 [ 136.682589][ T8199] vfs_write+0xaeb/0xd30 [ 136.686883][ T8199] ? __pfx_sock_write_iter+0x10/0x10 [ 136.692180][ T8199] ? __pfx_vfs_write+0x10/0x10 [ 136.696973][ T8199] ? fdget_pos+0x19a/0x320 [ 136.701399][ T8199] ksys_write+0x183/0x2b0 [ 136.705728][ T8199] ? __pfx_ksys_write+0x10/0x10 [ 136.710664][ T8199] ? do_syscall_64+0x100/0x230 [ 136.715455][ T8199] ? do_syscall_64+0xb6/0x230 [ 136.720138][ T8199] do_syscall_64+0xf3/0x230 [ 136.724804][ T8199] ? clear_bhb_loop+0x35/0x90 [ 136.729486][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.735381][ T8199] RIP: 0033:0x7fa0f297e719 [ 136.739798][ T8199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.760034][ T8199] RSP: 002b:00007fa0f3819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.768458][ T8199] RAX: ffffffffffffffda RBX: 00007fa0f2b36058 RCX: 00007fa0f297e719 [ 136.776432][ T8199] RDX: 000000000000fe33 RSI: 0000000020000000 RDI: 0000000000000005 [ 136.784399][ T8199] RBP: 00007fa0f29f132e R08: 0000000000000000 R09: 0000000000000000 [ 136.792368][ T8199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.800340][ T8199] R13: 0000000000000000 R14: 00007fa0f2b36058 R15: 00007ffd448e7c98 [ 136.808336][ T8199] [ 136.811361][ T8199] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 136.818641][ T8199] CPU: 0 UID: 0 PID: 8199 Comm: syz.0.666 Tainted: G W 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 136.830700][ T8199] Tainted: [W]=WARN [ 136.834580][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 136.844639][ T8199] Call Trace: [ 136.847915][ T8199] [ 136.850852][ T8199] dump_stack_lvl+0x241/0x360 [ 136.855539][ T8199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.860750][ T8199] ? __pfx__printk+0x10/0x10 [ 136.865344][ T8199] ? vscnprintf+0x5d/0x90 [ 136.869672][ T8199] panic+0x349/0x880 [ 136.873568][ T8199] ? __warn+0x177/0x4e0 [ 136.877719][ T8199] ? __pfx_panic+0x10/0x10 [ 136.882145][ T8199] __warn+0x34b/0x4e0 [ 136.886118][ T8199] ? rcu_note_context_switch+0xcf4/0xff0 [ 136.891751][ T8199] report_bug+0x2b3/0x500 [ 136.896077][ T8199] ? rcu_note_context_switch+0xcf4/0xff0 [ 136.901740][ T8199] handle_bug+0x60/0x90 [ 136.905923][ T8199] exc_invalid_op+0x1a/0x50 [ 136.910440][ T8199] asm_exc_invalid_op+0x1a/0x20 [ 136.915306][ T8199] RIP: 0010:rcu_note_context_switch+0xcf4/0xff0 [ 136.921554][ T8199] Code: 00 ba 02 00 00 00 e8 7b f8 fd ff 4c 8b b4 24 80 00 00 00 eb 91 c6 05 12 45 8b 0e 01 90 48 c7 c7 80 28 0c 8c e8 6d 29 da ff 90 <0f> 0b 90 90 e9 3b f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 00 f4 ff ff [ 136.941165][ T8199] RSP: 0018:ffffc9000338edc0 EFLAGS: 00010046 [ 136.947232][ T8199] RAX: 44f5f761c36e2800 RBX: ffff88807d2ade44 RCX: 0000000000040000 [ 136.955290][ T8199] RDX: ffffc9000be01000 RSI: 000000000003ffff RDI: 0000000000040000 [ 136.963258][ T8199] RBP: ffffc9000338ef10 R08: ffffffff8155d252 R09: fffffbfff1cf9fd0 [ 136.971228][ T8199] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff88807d2ada00 [ 136.979200][ T8199] R13: 0000000000000000 R14: 1ffff92000671dd0 R15: dffffc0000000000 [ 136.987257][ T8199] ? __warn_printk+0x292/0x360 [ 136.992031][ T8199] ? mark_lock+0x9a/0x360 [ 136.996357][ T8199] ? __lock_acquire+0x1384/0x2050 [ 137.001396][ T8199] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 137.007374][ T8199] ? mark_lock+0x9a/0x360 [ 137.011731][ T8199] ? rcu_is_watching+0x15/0xb0 [ 137.016494][ T8199] __schedule+0x348/0x4bd0 [ 137.020928][ T8199] ? __pfx___schedule+0x10/0x10 [ 137.025777][ T8199] ? schedule+0x90/0x320 [ 137.030014][ T8199] ? __pfx_lock_release+0x10/0x10 [ 137.035032][ T8199] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 137.040948][ T8199] ? schedule+0x90/0x320 [ 137.045197][ T8199] schedule+0x14b/0x320 [ 137.049358][ T8199] synchronize_rcu_expedited+0x70a/0x830 [ 137.054995][ T8199] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 137.061145][ T8199] ? __pfx_autoremove_wake_function+0x10/0x10 [ 137.067214][ T8199] ? add_taint+0x99/0xe0 [ 137.071452][ T8199] ? __might_resched+0x5e0/0x780 [ 137.076405][ T8199] ? __pfx___might_resched+0x10/0x10 [ 137.081688][ T8199] ? nbcon_cpu_emergency_exit+0x6e/0xd0 [ 137.087246][ T8199] ? nbcon_cpu_emergency_exit+0x77/0xd0 [ 137.092818][ T8199] ? lockdep_rcu_suspicious+0x299/0x340 [ 137.098393][ T8199] synchronize_rcu+0x11b/0x360 [ 137.103157][ T8199] ? __pfx_synchronize_rcu+0x10/0x10 [ 137.108437][ T8199] ? do_raw_spin_unlock+0x13c/0x8b0 [ 137.113638][ T8199] phonet_route_del+0xc6/0x140 [ 137.118407][ T8199] route_doit+0x514/0x640 [ 137.122732][ T8199] ? __pfx_route_doit+0x10/0x10 [ 137.127598][ T8199] ? __pfx_route_doit+0x10/0x10 [ 137.132443][ T8199] rtnetlink_rcv_msg+0x791/0xcf0 [ 137.137400][ T8199] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 137.142521][ T8199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.148024][ T8199] ? ref_tracker_free+0x643/0x7e0 [ 137.153072][ T8199] netlink_rcv_skb+0x1e3/0x430 [ 137.157842][ T8199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.163303][ T8199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.168601][ T8199] ? netlink_deliver_tap+0x2e/0x1b0 [ 137.173832][ T8199] netlink_unicast+0x7f6/0x990 [ 137.178598][ T8199] ? __pfx_netlink_unicast+0x10/0x10 [ 137.183875][ T8199] ? __virt_addr_valid+0x183/0x530 [ 137.188984][ T8199] ? __check_object_size+0x48e/0x900 [ 137.194303][ T8199] netlink_sendmsg+0x8e4/0xcb0 [ 137.199076][ T8199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.204359][ T8199] ? __pfx_aa_file_perm+0x10/0x10 [ 137.209394][ T8199] ? aa_sock_msg_perm+0x91/0x160 [ 137.214330][ T8199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.219615][ T8199] __sock_sendmsg+0x221/0x270 [ 137.224297][ T8199] sock_write_iter+0x2d7/0x3f0 [ 137.229057][ T8199] ? __pfx_sock_write_iter+0x10/0x10 [ 137.234344][ T8199] ? bpf_lsm_file_permission+0x9/0x10 [ 137.239712][ T8199] ? security_file_permission+0x74/0x280 [ 137.245348][ T8199] vfs_write+0xaeb/0xd30 [ 137.249609][ T8199] ? __pfx_sock_write_iter+0x10/0x10 [ 137.254904][ T8199] ? __pfx_vfs_write+0x10/0x10 [ 137.259683][ T8199] ? fdget_pos+0x19a/0x320 [ 137.264097][ T8199] ksys_write+0x183/0x2b0 [ 137.268423][ T8199] ? __pfx_ksys_write+0x10/0x10 [ 137.273274][ T8199] ? do_syscall_64+0x100/0x230 [ 137.278034][ T8199] ? do_syscall_64+0xb6/0x230 [ 137.282703][ T8199] do_syscall_64+0xf3/0x230 [ 137.287196][ T8199] ? clear_bhb_loop+0x35/0x90 [ 137.291868][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.297759][ T8199] RIP: 0033:0x7fa0f297e719 [ 137.302171][ T8199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.321774][ T8199] RSP: 002b:00007fa0f3819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.330191][ T8199] RAX: ffffffffffffffda RBX: 00007fa0f2b36058 RCX: 00007fa0f297e719 [ 137.338158][ T8199] RDX: 000000000000fe33 RSI: 0000000020000000 RDI: 0000000000000005 [ 137.346123][ T8199] RBP: 00007fa0f29f132e R08: 0000000000000000 R09: 0000000000000000 [ 137.354090][ T8199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.362060][ T8199] R13: 0000000000000000 R14: 00007fa0f2b36058 R15: 00007ffd448e7c98 [ 137.370046][ T8199] [ 137.373197][ T8199] Kernel Offset: disabled [ 137.377531][ T8199] Rebooting in 86400 seconds..